Unscored CVE-2019-12425 EUVD-2019-4035GHSA-33xj-83vp-6r44

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host

Published Apr 30, 2020 · Updated Aug 4, 2024 · Assigned by apache

Vendor: Apache Product: Apache OFBiz

Description

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host

Affected products

Vendor	Product	Affected	Fixed
Apache	Apache OFBiz	17.12.01	—

References

https://s.apache.org/7sr1x
[ofbiz-user] 20200503 Re: [CVE-2019-12425] Apache OFBiz Host Header Injection mailing-list
[ofbiz-user] 20200504 Re: [CVE-2019-12425] Apache OFBiz Host Header Injection mailing-list
[ofbiz-commits] 20210321 [ofbiz-site] branch master updated: Updates security page for CVE-2021-26295 fixed in 17.12.06 mailing-list
[ofbiz-commits] 20210427 [ofbiz-site] branch master updated: Updates security page for CVE-2021-29200 and 30128 fixed in 17.12.07 mailing-list