Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-13130

[CVE-2024-45195] Add permission check for view-maps and change defaults for request-maps

    XMLWordPrintableJSON

Details

    • Bug Crush Event - 21/2/2015

    Description

      If a user is not authorized, the system should not allow access to rendered views.

      Additionally, the default for the request-map paramerters "auth" and "https" should be set to "true".

      This improvement aims to enhance security by preventing unauthorized access.

      Attachments

        Activity

          People

            stschikin Sebastian Tschikin
            stschikin Sebastian Tschikin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: