PT-2016-5045
CVE-2016-2170
·
تاريخ النشر
2016-04-12
·
تاريخ التحديث
2022-05-25
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache OFBiz versions 12.04.x through 12.04.05
Apache OFBiz versions 13.07.x through 13.07.02
Description
The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Recommendations
For Apache OFBiz versions 12.04.x through 12.04.05, update to version 12.04.06 or later.
For Apache OFBiz versions 13.07.x through 13.07.02, update to version 13.07.03 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾