Security Advisory

CVE-2019-10073

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-09-11 20:34:02
Last updated 2024-08-04 22:10:09
Assigner apache
State PUBLISHED

Description

The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616