CVE-2019-10073

2019-09-1120:34:02

apache

www.cve.org

0.004 Low

EPSS

Percentile

74.6%

JSON

The “Blog”, “Forum”, “Contact Us” screens of the template “ecommerce” application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616

CNA Affected

[
  {
    "product": "OFBiz",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "OFBiz 16.11.01 to 16.11.05"
      }
    ]
  }
]