Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2013-07/0143.html | Broken Link |
http://ofbiz.apache.org/download.html#vulnerabilities | Patch Vendor Advisory |
http://osvdb.org/95522 | Broken Link |
http://secunia.com/advisories/53910 | Third Party Advisory |
http://www.securityfocus.com/bid/61369 | Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/85875 | Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-08-15T16:00:00
Updated: 2017-08-28T12:57:01
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-2250
JSON object: View
NVD Information
Status : Analyzed
Published: 2013-08-15T16:55:09.437
Modified: 2018-05-18T12:17:33.600
Link: CVE-2013-2250
JSON object: View
Redhat Information
No data.
CWE