title: Apache OFBiz: Execution of Solr plugin queries without authentication
description: Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin.
This issue affects Apache OFBiz: before 18.12.09.
Users are recommended to upgrade to version 18.12.09
problem types: CWE-306 Missing Authentication for Critical Function
affected:
{
defaultStatus: affected
product: Apache OFBiz
vendor: Apache Software Foundation
versions:
lessThan: 18.12.09, status: affected, version: 0, versionType: custom
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]