Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-12055

Prevent possible post-auth RCE from webtools/control/ProgramExport

    XMLWordPrintableJSON

Details

    • Bug Crush Event - 21/2/2015

    Description

      This was reported to the security team by Shuibo Ye <shuiboye@gmail.com>. We did not create a CVE because it's a post-auth "vulnerability"

      Attachments

        Activity

          People

            jleroux Jacques Le Roux
            jleroux Jacques Le Roux
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: