Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-25958
HistoryAug 30, 2021 - 2:15 p.m.

Code injection

2021-08-3014:15:00
PRIOn knowledge base
www.prio-n.com
2

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he tries to login with it an exception occurs.

CPENameOperatorVersion
ofbizge17.12.01
ofbizlt17.12.08

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

Related for PRION:CVE-2021-25958