title: Apache OFBiz: Arbitrary file reading vulnerability
description: Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a
pre-authentication attack.
This issue affects Apache OFBiz: before 18.12.07.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
defaultStatus: affected
product: Apache OFBiz
vendor: Apache Software Foundation
versions:
lessThan: 18.12.07, status: affected, version: 18.12.06, versionType: custom
}
metrics:
other: [
content: {'text': 'important'}
type: Textual description of severity
]
solutions:
Upgrade to release 18.12.07