Beveiligingsadvies

CVE-2024-48962

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-18 08:41:30

Laatst bijgewerkt 2026-05-04 14:55:28

Toegewezen door apache

CVSS-score 8.9

Status PUBLISHED

Beschrijving

Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.17. Users are recommended to upgrade to version 18.12.17, which fixes the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗