CVE-2019-11580—Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

PUBLISHEDvulnerability record

2021-11-03 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2019-11580
Project:: Atlassian
Product:: Crowd and Crowd Data Center
Date Added:: 2021-11-03
Due Date:: 2022-05-03
Last Updated:: June 21, 2025

Vulnerability Name

Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

Description

Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: KNOWN

Action

Apply updates per vendor instructions.