2020-04-01 18:18:48
apache
PUBLISHED
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.