CVE-2022-47501 Apache OFBiz: Arbitrary file reading vulnerability

2023-04-1415:01:31

CWE-22

apache

www.cve.org

apache ofbiz

file reading

vulnerability

pre-authentication

18.12.07

EPSS

0.071

Percentile

94.1%

JSON

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a
pre-authentication attack.
This issue affects Apache OFBiz: before 18.12.07.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Apache OFBiz",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "18.12.07",
        "status": "affected",
        "version": "18.12.06",
        "versionType": "custom"
      }
    ]
  }
]