Security Advisory

CVE-2019-10073

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-11 20:34:02
Last updated 2024-08-04 22:10:09
Assigner apache
CVSS score not scored
State PUBLISHED

Description

The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616