Non notée
CVE-2019-0235 Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks
Description
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OFBiz | 17.12.01 | Pas de correctif indiqué |
Références
- s.apache.org s.apache.org
- packetstormsecurity.com packetstormsecurity.com
- [ofbiz-notifications] 20200705 [jira] [Commented] (OFBIZ-11306) POC for CSRF Token (CVE-2019-0235) lists.apache.org
- [ofbiz-notifications] 20200706 [jira] [Commented] (OFBIZ-11306) POC for CSRF Token (CVE-2019-0235) lists.apache.org
- [ofbiz-notifications] 20200707 [jira] [Commented] (OFBIZ-11306) POC for CSRF Token (CVE-2019-0235) lists.apache.org
- [ofbiz-notifications] 20200708 [jira] [Commented] (OFBIZ-11306) POC for CSRF Token (CVE-2019-0235) lists.apache.org
- [ofbiz-commits] 20200708 [ofbiz-framework] 01/02: Documented: POC for CSRF Token (CVE-2019-0235) (OFBIZ-11306) lists.apache.org
- [announce] 20210125 Apache Software Foundation Security Report: 2020 lists.apache.org
- [announce] 20210223 Re: Apache Software Foundation Security Report: 2020 lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OFBiz
Les 4 CVE de Apache OFBiz →
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
Non notée
CVE-2020-1943
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07
Non notée
CVE-2019-12426
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache…
Non notée