CVE-2017-18108

CVE-2017-18108 describes a critical JNDI injection vulnerability in Atlassian Crowd versions prior to 2.10.2, specifically within the administration SMTP configuration. This flaw allows remote attackers with administrative privileges to execute arbitrary code on the affected system. With a CVSS score of 7.2 (HIGH), the vulnerability is easily exploitable over the network with high impact on confidentiality, integrity, and availability, though it requires high privileges. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.