[OFBIZ-11842] Failed to load PDF document after 'Quick checkout'

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 17.12.04, 18.12.01
• Component/s: ecommerce, order
• Assignee: Jacques Le Roux
• Reporter: Dikpal Kanungo
• Created: 27/Jun/20 07:44
• Updated: 27/Jun/20 12:26
• Resolved: 27/Jun/20 08:50

Description

Issue: The user is unable to open the order PDF.

Steps to regenerate:

• Login at https://demo-trunk.ofbiz.apache.org with a registered user
• Try placing an order with 'Quick Checkout'
• At order confirmation page click on 'PDF'

Reference order: https://demo-trunk.ofbiz.apache.org/ecommerce/control/processorder

Please have a look at the attachment.

Issue Links

• is broken by: OFBIZ-11836 IDOR vulnerability in the order processing feature in ecommerce component (CVE-2020-13923)