CVE-2019-11580
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
95.4%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
95.4%EPSS · 30 days95.4%
2026-06-302026-07-16
Product
Atlassian / Crowd and Crowd Data Center
Vulnerability
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
Yes
Summary description
Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-11580
No related CVEs by CWE or product.