Description
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Apache OFBiz | Apache OFBiz 17.12.03 and earlier versions | — |
References
- https://s.apache.org/chokl
- [announce] 20200715 [CVE-2020-13923] IDOR in Apache OFBiz mailing-list
- [ofbiz-notifications] 20200716 [jira] [Updated] (OFBIZ-11836) IDOR vulnerability in the order processing feature in ecommerce component (CVE-2020-13923) mailing-list
- [ofbiz-commits] 20210321 [ofbiz-site] branch master updated: Updates security page for CVE-2021-26295 fixed in 17.12.06 mailing-list
- [ofbiz-commits] 20210427 [ofbiz-site] branch master updated: Updates security page for CVE-2021-29200 and 30128 fixed in 17.12.07 mailing-list