Описание
A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges
This issue affects Apache OFBiz: before 24.09.07.
Users are recommended to upgrade to version 24.09.07, which fixes the issue.
Ссылки
- Mailing ListVendor Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 24.09.07 (исключая)
cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00407
Низкий
8.8 High
CVSS3
Дефекты
CWE-285
Связанные уязвимости
CVSS3: 8.8
github
3 месяца назад
A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges This issue affects Apache OFBiz: before 24.09.07. Users are recommended to upgrade to version 24.09.07, which fixes the issue.
EPSS
Процентиль: 34%
0.00407
Низкий
8.8 High
CVSS3
Дефекты
CWE-285