CVE-2022-47501CWE-22

Apache OFBiz: Arbitrary file reading vulnerability

High · published April 14, 2023

CVSS v3.1

7.5

EPSS

10%

Percentile

95.7

In the wild

Unconfirmed

What it is

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a

pre-authentication attack.

This issue affects Apache OFBiz: before 18.12.07.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.10180 · 95.7th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2023-04-14T15:01Z

EPSS history

Timeline