Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-25371
HistorySep 02, 2022 - 7:15 a.m.

Remote code execution

2022-09-0207:15:00
PRIOn knowledge base
www.prio-n.com
4
apache ofbiz
birt project plugin
data visualizations
reports
remote code execution
nvd

9.6 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142) it is possible to perform a remote code execution (RCE) attack in Apache OFBiz, release 18.12.05 and earlier.

CPENameOperatorVersion
ofbizlt18.12.06

9.6 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Related for PRION:CVE-2022-25371