Lucene search

K

Ofbiz-framework Security Vulnerabilities

cve
cve

CVE-2021-25958

In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he tries to login with it an exception...

7.5CVSS

7.4AI Score

0.002EPSS

2021-08-30 02:15 PM
19