OFBiz › OFBiz - User

[CVE-2020-13923] IDOR in Apache OFBiz

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

1 message

Jacques Le Roux

[CVE-2020-13923] IDOR in Apache OFBiz

Administrator

Severity: Important

Vendor: The Apache Software Foundation

Versions Affected:
All versions < 17.12.04

Description:
IDOR vulnerability in the order processing feature from ecommerce component.

Mitigation:
Upgrade to 17.12.04 or manually apply the commit at OFBIZ-11836
----

Credit:
Harshit Shukla <[hidden email]>

References:
https://ofbiz.apache.org/security.html