[jira] [Commented] (OFBIZ-11583) Prevent Host Header Injection (CVE-2019-12425)

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (OFBIZ-11583) Prevent Host Header Injection (CVE-2019-12425)

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-11583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17075767#comment-17075767 ]

ASF subversion and git services commented on OFBIZ-11583:
---------------------------------------------------------

Commit 793628bb15521257a8ccdfec181daa4cdb501eea in ofbiz-framework's branch refs/heads/release17.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=793628b ]

Fixed: Prevent Host Header Injection (CVE-2019-12425)

(OFBIZ-11583)

Conflicts handled by hand
  framework/security/config/security.properties
  framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/RequestHandler.java


> Prevent Host Header Injection (CVE-2019-12425)
> ----------------------------------------------
>
>                 Key: OFBIZ-11583
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-11583
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: framework
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.3.4#803005)