Non évaluée

Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz

CVE-2022-25371 Première détection SecPulse Sep 2, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution (RCE) attack in Apache OFBiz, release 18.12.05 and earlier.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

NVD OSV