Non notée
CVE-2019-12425 Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
Description
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OFBiz | 17.12.01 | Pas de correctif indiqué |
Références
- s.apache.org s.apache.org
- [ofbiz-user] 20200503 Re: [CVE-2019-12425] Apache OFBiz Host Header Injection lists.apache.org
- [ofbiz-user] 20200504 Re: [CVE-2019-12425] Apache OFBiz Host Header Injection lists.apache.org
- [ofbiz-commits] 20210321 [ofbiz-site] branch master updated: Updates security page for CVE-2021-26295 fixed in 17.12.06 lists.apache.org
- [ofbiz-commits] 20210427 [ofbiz-site] branch master updated: Updates security page for CVE-2021-29200 and 30128 fixed in 17.12.07 lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OFBiz
Les 4 CVE de Apache OFBiz →
CVE-2019-0235
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks
Non notée
CVE-2020-1943
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07
Non notée
CVE-2019-12426
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache…
Non notée