Crowd Security Advisories and Fixes

This page has information on how to report any security bugs you might find in Crowd, and what we will do to fix the problem and announce the solution.

On this page:

Finding and Reporting a Security Vulnerability

Atlassian's approach to reporting security vulnerabilities is detailed in How to Report a Security Issue.

Publication of Security Advisories

Atlassian's approach to releasing security advisories is detailed in Security Advisory Publishing Policy.

Severity Levels

Atlassian's approach to ranking security issues is detailed in Severity Levels for Security Issues.

Patches and Fixes

Atlassian's approach to releasing patches for security issues is detailed in Security Patch Policy.

Published Security Advisories

• Crowd Security Advisory 2010-07-05
• Crowd Security Advisory 2010-05-04
• Crowd Security Advisory 2008-10-14 - Parameter Injection Vulnerability
• Crowd Security Advisory 2012-05-17
• Crowd Security Notice 2013-07-01
• Crowd Security Advisory 2013-07-16
• Crowd Security Advisory 2014-05-21