Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-12857

Execution of queries without authentication

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 18.12.09, 22.01.01
    • 18.12.09, 22.01.01
    • solr
    • None
    • Bug Crush Event - 21/2/2015

    Description

      A security reporter who does not want to be named reported it to us.

      The problem lies with the Solr Plugin for OFBiz. It allows the execution of queries without authentication.

      Attachments

        1. Solr-doFilter.patch
          2 kB
          Jacques Le Roux

        Activity

          People

            jleroux Jacques Le Roux
            jleroux Jacques Le Roux
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: