CVE-2020-1943 Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07

Description

Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache OFBiz	Versions non publiées

Autres CVE de Apache OFBiz

Les 4 CVE de Apache OFBiz →

CVE-2019-0235 Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks Non notée CVE-2019-12425 Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host Non notée CVE-2019-12426 an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache… Non notée