high7.5
CVE-2022-47501
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin.
Impact
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Ofbiz | before 18.12.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2023/04/18/5
- http://www.openwall.com/lists/oss-security/2023/04/18/9
- http://www.openwall.com/lists/oss-security/2023/04/19/1
- http://www.openwall.com/lists/oss-security/2023/04/19/6
- https://lists.apache.org/thread/k8s76l0whydy45bfm4b69vq0mf94p3wc
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/security.html
- http://www.openwall.com/lists/oss-security/2023/04/18/5
- http://www.openwall.com/lists/oss-security/2023/04/18/9
- http://www.openwall.com/lists/oss-security/2023/04/19/1
- http://www.openwall.com/lists/oss-security/2023/04/19/6
- https://lists.apache.org/thread/k8s76l0whydy45bfm4b69vq0mf94p3wc
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/security.html