未評価
Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz
CVE-2022-25371
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution (RCE) attack in Apache OFBiz, release 18.12.05 and earlier.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com
- web openwall.com
- web openwall.com