CVE-2022-29158

Published: 2022-09-02T07:15Z

Last Modified: 2024-11-21T06:58Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthenticated users. Upgrade to 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12599 > MITRE Terms of Use apply – see LICENSE‑MITRE.txt