Unrated
Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz
CVE-2022-25371
First seen on SecPulse
Original description The description as published by the source.
Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution (RCE) attack in Apache OFBiz, release 18.12.05 and earlier.
References
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com
- web openwall.com
- web openwall.com