Non notée
CVE-2019-12426 an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache…
Description
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OFBiz | Versions non publiées |
Références
- s.apache.org s.apache.org
- [announce] 20200206 [SECURITY] CVE-2019-12426 information disclosure vulnerability in Apache OFBiz lists.apache.org
- [ofbiz-commits] 20200306 svn commit: r1874880 [5/5] - in /ofbiz/site: download.html release-notes-17.12.01.html security.html template/page/download.tpl.php template/page/release-notes-17.12.01.tpl.php template/page/security.tpl.php lists.apache.org
- [ofbiz-commits] 20200430 svn commit: r1877207 - in /ofbiz/site: security.html template/page/security.tpl.php lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OFBiz
Les 4 CVE de Apache OFBiz →
CVE-2019-0235
Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks
Non notée
CVE-2019-12425
Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
Non notée
CVE-2020-1943
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07
Non notée