CVE-2017-18109

creationtimestamp| type| source ---|---|--- 2019-03-29 17:28:41+00:00| seen| https://t.me/cibsecurity/3436...

CVE-2017-18109

The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect...

CVE-2017-18109

The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect...

CVE-2017-18109

The CVE-2017-18109 vulnerability affects Atlassian Crowd’s CrowdId login resource before v3.0.2 and in v3.1.0 before v3.1.1, enabling remote attackers to perform phishing via an open redirect. Root cause: improper redirect handling in the login flow. Impact: open redirect could lead victims to a ...