Lucene search

K
osvGoogleOSV:CVE-2021-25958
HistoryAug 30, 2021 - 2:15 p.m.

CVE-2021-25958

2021-08-3014:15:07
Google
osv.dev
5

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he tries to login with it an exception occurs.

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

Related for OSV:CVE-2021-25958