CVE-2019-12425 Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host

Description

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache OFBiz	17.12.01	Pas de correctif indiqué

Autres CVE de Apache OFBiz

Les 4 CVE de Apache OFBiz →

CVE-2019-0235 Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks Non notée CVE-2020-1943 Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07 Non notée CVE-2019-12426 an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache… Non notée