apache ofbiz 12.04 vulnerabilities and exploits

(subscribe to this query)

The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article...

Apache Ofbiz 11.04 Apache Ofbiz 11.04.01 Apache Ofbiz 11.04.02 Apache Ofbiz 11.04.03 Apache Ofbiz 11.04.04 Apache Ofbiz 11.04.05 Apache Ofbiz 11.04.06 Apache Ofbiz 12.04 Apache Ofbiz 12.04.01 Apache Ofbiz 12.04.02 Apache Ofbiz 12.04.03 Apache Ofbiz 12.04.04

By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to...

Apache Ofbiz 11.04 Apache Ofbiz 11.04.01 Apache Ofbiz 11.04.02 Apache Ofbiz 11.04.03 Apache Ofbiz 11.04.04 Apache Ofbiz 11.04.05 Apache Ofbiz 11.04.06 Apache Ofbiz 12.04 Apache Ofbiz 12.04.01 Apache Ofbiz 12.04.02 Apache Ofbiz 12.04.03 Apache Ofbiz 12.04.04

Apache OFBiz 12.04.x prior to 12.04.06 and 13.07.x prior to 13.07.03 allow remote malicious users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook