Get a Pentest and security assessment of your IT network.

2021-current

CVE-2020-13923 – IDOR vulnerability in the order processing feature from ecommerce compone

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13923

Reference (s):

  • https://s.apache.org/chokl
  • URL: https://s.apache.org/chokl
  • MLIST:[announce] 20200715 [CVE-2020-13923] IDOR in Apache OFBiz
  • URL: https://lists.apache.org/thread.html/r2e669797c1ea08562253239d2dc4192d951945e0c36cb0754f5394a6@%3Cannounce.apache.org%3E
  • MLIST:[ofbiz-commits] 20210321 [ofbiz-site] branch master updated: Updates security page for CVE-2021-26295 fixed in 17.12.06
Related posts
2021-current

CVE-2004-1715 - Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 all

2021-current

CVE-2014-7793 - The CB - Calciatori Brutti (aka com.calciatori.brutti) application 1.0 fo

2021-current

CVE-2019-9721 - A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows

2021-current

CVE-2020-13652 - An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before