Apache OFBiz: Arbitrary file reading vulnerability
CVE-2022-47501

7.5HIGH

Key Information:

Vendor: Apache
Status: Apache Ofbiz
Vendor: CVE Published:; 14 April 2023

Summary

An arbitrary file reading vulnerability exists in Apache OFBiz when the Solr plugin is in use. This vulnerability allows attackers to exploit the system prior to authentication, potentially exposing sensitive files. It is essential for users of affected versions to upgrade to mitigate this risk effectively.

Affected Version(s)

Apache OFBiz 18.12.06

References

https://lists.apache.org/thread/k8s76l0whydy45bfm4b69vq0m...

vendor-advisory

https://ofbiz.apache.org/download.html

https://ofbiz.apache.org/security.html

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 14, 2023
Vulnerability Reserved
Dec 15, 2022

Collectors

NVD DatabaseMitre Database

Credit

Skay <[email protected]>

.