oss-security - CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <8a4746bb-6c19-dd80-10ca-9aa2b87d605b@apache.org>
Date: Mon, 10 Apr 2023 09:21:11 +0000
From: Jacques Le Roux <jleroux@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability
 

Severity: important

Description:

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz.This issue affects Apache OFBiz: before 18.12.07.

Required Configurations:

Using the Solr plugin

Solution:

Upgrade to release 18.12.07

Credit:

Skay <lhcaomail@...il.com> (finder)

References:

https://lists.apache.org/list.html?announce@apache.org
https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2022-47501

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.