Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525

Issue to group security concerns

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Critical
    • Resolution: Unresolved
    • Trunk, Upcoming Branch
    • None
    • ALL COMPONENTS
    • None
    • Bug Crush Event - 21/2/2015

    Description

      The goal of this virtual issue is only to group together all OFBiz security issues (pending or closed).

      This issue should never be closed

      Attachments

        Issue Links

          incorporates

          Sub-task - The sub-task of the issue OFBIZ-178 Cross site scripting vulnerability in Forum

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue OFBIZ-260 Cross Site Scripting Vulnerability (XSS)

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue OFBIZ-1193 html code is not sanitized in all the text input field

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue OFBIZ-1106 Passwords in POS are shown in clear text

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-5254 Services allow arbitrary HTML for parameters with allow-html set to "safe"

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-1476 XSS vulnerability in OFBiz Login Form

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-1900 Fortify Open Source Security Report mentioned OFBiz

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-2121 XSS vulnerability in eCommerce/ordermgr

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-6669 Possible stored XSS issue with Content

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-1970 unescaped html special characters create problems in pages

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. OFBIZ-4983 New feature to reclaim a user account - Using Security Questions

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. OFBIZ-5009 Enforce user to reset his password in a pre-defined regular interval of time.

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-2243 In hyperlink and sub-hyperlink elements, replacement of target parameters by parameter sub-elements

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-2260 Secure URLs in Freemarker templates files

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-10484 Sanitize the output of XML-RPC replies of error data

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-10509 Disable DTDs for XML-RPC requests

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. OFBIZ-2330 Main task for securing URLs in Freemarker templates files

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. OFBIZ-10517 Update Apache Tomcat to 9.0.10 because of CVE-2018-8037

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. OFBIZ-5343 Update owasp-esapi-java

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is a parent of

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-10054 Product content management screen doesn't validate trusted users' input

          • Major - Major loss of function.
          • Closed
          is related to

          Task - A task that needs to be done. OFBIZ-7928 Use "Let's encrypt" for OFBiz demos SSL/TLS certificates

          • Major - Major loss of function.
          • Closed
          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              jleroux Jacques Le Roux
              Votes:
              3 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated: