Non notée
CVE-2019-10073 The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to…
Description
The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OFBiz | Versions non publiées |
Autres CVE de OFBiz
Les 11 CVE de OFBiz →
CVE-2024-48962
Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper…
8.9
Élevée
CVE-2024-45195
Apache OFBiz Forced Browsing Vulnerability
Non notée
CVE-2024-38856
Apache OFBiz Incorrect Authorization Vulnerability
Non notée
CVE-2024-32113
Apache OFBiz Path Traversal Vulnerability
Non notée