Total vulnerabilities in the database
The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability.
| Software | From | Fixed in |
|---|---|---|
| atlassian / crowd | 3.7.2 | 4.0.0 |
| atlassian / crowd | 3.6.3 | 3.7.1 |
| atlassian / crowd | - | 3.2.11 |
| atlassian / crowd | 3.3.0 | 3.3.8 |
| atlassian / crowd | 3.4.0 | 3.4.7 |
| atlassian / crowd | 3.5.0 | 3.5.2 |
| atlassian / crowd | 3.6.0 | 3.6.2 |