2 matches found
Design/Logic Flaw
The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...
7.5CVSS8.2AI score0.04705EPSS
SaveExploits0References5Affected Software1
CVE-2016-6496: Improper Input Validation
The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...
9.8CVSS6.5AI score0.04705EPSS
SaveExploits0References2
20