| <!DOCTYPE html> |
| <html lang="en"> |
| <!--[if lt IE 7 ]><html class="ie ie6" lang="en"> <![endif]--> |
| <!--[if IE 7 ]><html class="ie ie7" lang="en"> <![endif]--> |
| <!--[if IE 8 ]><html class="ie ie8" lang="en"> <![endif]--> |
| <!--[if (gte IE 9)|!(IE)]><!--> |
| <head> |
| <meta charset="utf-8"> |
| <title>The Apache OFBiz® Project - Security</title> |
| <meta name="Description" content="OFBiz is an open source enterprise automation software project licensed under the Apache License. It means you are not alone and can work with many others." /> |
| <meta name="Robots" content="index,follow" /> |
| <!-- Mobile Specific Metas |
| ================================================== --> |
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> |
| <!-- CSS |
| ================================================== --> |
| <!-- local fonts --> |
| <link type="text/css" id="fonts" rel="stylesheet" href="/css/fonts.css"> |
| <!-- Bootstrap --> |
| <link type="text/css" rel="stylesheet" href="/bootstrap/css/bootstrap.min.css"> |
| <!-- plugin css --> |
| <link rel="stylesheet" type="text/css" href="/js/plugins/pretty-photo/css/prettyPhoto.css" /> |
| <link rel="stylesheet" type="text/css" href="/js/plugins/rs-plugin/css/settings.css" media="screen" /> |
| <link type="text/css" rel="stylesheet" href="/js/plugins/hoverdir/css/style.css"> |
| <!-- icon fonts --> |
| <link type="text/css" rel="stylesheet" href="/font-icons/custom-icons/css/custom-icons.css"> |
| <link type="text/css" rel="stylesheet" href="/font-icons/custom-icons/css/custom-icons-ie7.css"> |
| <!-- Custom css --> |
| <link type="text/css" rel="stylesheet" href="/css/layout.css"> |
| <link type="text/css" id="colors" rel="stylesheet" href="/css/colors.css"> |
| <!--[if lt IE 9]><script src="//html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> |
| <!--[if gte IE 9]><style type="text/css">.iconBig, .active, .hover a , .Shover a { filter: none !important; } </style> <![endif]--> |
| <script src="js/modernizr-2.6.1.min.js"></script> |
| <!-- Favicons |
| ================================================== --> |
| <link rel="shortcut icon" href="/images/favicon.ico"> |
| <link rel="apple-touch-icon" href="/images/apple-icon.png"> |
| <link rel="apple-touch-icon" sizes="72x72" href="/images/apple-icon-72x72.png"> |
| <link rel="apple-touch-icon" sizes="114x114" href="/images/apple-icon-114x114.png"> |
| <link rel="apple-touch-icon" sizes="144x144" href="/images/apple-icon-144x144.png"> |
| </head> |
| <body> |
| <!-- header --> |
| <header id="mainHeader" class="clearfix"> |
| <div class="navbar navbar-fixed-top"> |
| <div class="navbar-inner"> |
| <div class="container"> <a href="index.html" class="brand"><img src="images/ofbiz_logo.png" alt="Apache OFBiz Logo"/></a> |
| <nav id="mainMenu" class="clearfix"> |
| <ul> |
| <li><a href="index.html" class="firstLevel">Home</a></li> |
| <li><a href="#" class="firstLevel">Getting Started</a> |
| <ul> |
| <li><a href="developers.html" class="">Developers</a></li> |
| <li><a href="business-users.html" class="last">Business Users</a></li> |
| </ul> |
| </li> |
| <li><a href="#" class="firstLevel">News</a> |
| <ul> |
| <li><a href="//twitter.com/apacheofbiz" target="external">Twitter</a></li> |
| <li><a href="//blogs.apache.org/ofbiz/" target="external" class="last">Blog</a></li> |
| </ul> |
| </li> |
| <li><a href="#" class="firstLevel">Documentation</a> |
| <ul> |
| <li><a href="//cwiki.apache.org/confluence/display/OFBIZ/Documentation" target="external" class="">User Documentation</a></li> |
| <li><a href="//cwiki.apache.org/confluence/display/OFBIZ/Technical+Documentation" target="external" class="">Technical Documentation</a></li> |
| <li><a href="//cwiki.apache.org/confluence/display/OFBIZ/Home" target="external" class="">Wiki</a></li> |
| <li><a href="#" class="firstLevel">API Reference</a> |
| <ul> |
| <li title="Trunk API"> |
| <a href="https://nightlies.apache.org/ofbiz/trunk/javadoc/" target="external">Trunk API</a></li> |
| </li> |
| <li title="Stable release API"> |
| <a href="https://nightlies.apache.org/ofbiz/stable/javadoc/" target="external">Stable Release API</a></li> |
| </li> |
| <li title="Next release API"> |
| <a href="https://nightlies.apache.org/ofbiz/next/javadoc/" target="external">Next Release API</a></li> |
| </li> |
| </ul> |
| </li> |
| </ul> |
| </li> |
| <li><a href="#" class="firstLevel">Community</a> |
| <ul> |
| <li><a href="getting-involved.html">Getting Involved</a></li> |
| <li><a href="mailing-lists.html">Mailing Lists</a></li> |
| <li><a href="source-repositories.html">Source Repository</a></li> |
| <li><a href="download.html">Downloads</a></li> |
| <li><a href="https://s.apache.org/dsj2p" target="external" >Issue Tracker</a></li> |
| <li><a href="faqs.html" class="last">FAQ</a></li> |
| </ul> |
| </li> |
| <li><a href="ofbiz-demos.html" class="firstLevel">Demos</a></li> |
| <li> |
| <a href="//twitter.com/ApacheOfbiz" class="icon-twitter-bird socialIcon tips" |
| target="external" title="follow us on Twitter"><span>twitter</span></a> |
| </li> |
| <li><a href="//www.linkedin.com/company/apache-ofbiz/" target="external" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> |
| <li><a href="//www.facebook.com/Apache-OFBiz-1478219232210477/?ref=page_internal" target="external" class="icon-facebook socialIcon tips" title="follow us on Facebook"><span>facebook</span></a></li> |
| <li><a href="//www.youtube.com/user/ofbiz" class="icon-play socialIcon tips" target="external" title="follow us on Youtube"><span>Youtube</span></a></li> |
| <!--<li><a href="#" class="icon-rss socialIcon tips" title="Our rss feed"><span>rss feed</span></a></li> |
| <li><a href="#" class="icon-gplus socialIcon tips" title="follow us on Google +"><span>google +</span></a></li> |
| <li><a href="#" class="icon-instagram socialIcon tips" title="follow us on Instagram"><span>instagram</span></a></li> |
| <li><a href="#" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> |
| <li><a href="#" class="icon-pinterest-circled socialIcon tips" title="follow us on Pinterest"><span>Pinterest</span></a></li>--> |
| </ul> |
| </nav> |
| </div> |
| </div> |
| </div> |
| </header> |
| <!-- header --> |
| <!-- globalWrapper --> |
| <div id="globalWrapper"> |
| |
| <!-- content --> |
| <!-- page content --> |
| <section id="content" class="sidebar"> |
| <header class="headerPage"> |
| <div class="container clearfix"> |
| <div class="row"> |
| <h1 class="span8">Security</h1> |
| <div class="span4" id="navTrail"> <a href="index.html" class="homeLink">home</a><span>/</span><a href="#">Community</a><span>/</span> <span class="current">Security</span> </div> |
| </div> |
| </div> |
| </header> |
| <div class="slice clearfix"> |
| <div class="container"> |
| <div class="row"> |
| <h2><a id="security"></a>Security Vulnerabilities</h2> |
| <div class="divider"><span></span></div> |
| <p>Please see the <a href="https://www.apache.org/security" target="external">ASF Security Team webpage</a> for further information about reporting a security vulnerability as well as their contact information. </p> |
| |
| <p><strong>We strongly encourage OfBiz users to report security problems affecting OFBiz to the private security mailing lists (either security@ofbiz.apache.org or security@apache.org), |
| before disclosing them in a public forum. Please don't pack several vulnerabilities in the same report, send them one by one, thanks in advance.</strong></p> |
| |
| <p>Note that we no longer create CVEs for post-auth attacks done using demo credentials, notably using the admin user. |
| <strong> <a href="https://s.apache.org/dsj2p"> Rather create bugs reports in our issue tracker (Jira) for that.</a><span style="color:red"> Please don't create Jira issues for unauth (aka pre-auth) reports, thanks in advance.</span></strong></p> |
| |
| <p>One of the reason we no longer create CVEs for post-auth attacks done using demo credentials is because |
| <a href="https://nightlies.apache.org/ofbiz/trunk/readme/html5/#security" target="external"> we highly suggest to OFBiz users to not use credentials demo in production</a> |
| and we expect OFBiz users to do so. |
| <a href="https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure" target="external"> We also warn our users on the "Keeping OFBiz secure wiki page".</a> |
| And finally, mostly we reject post-auth vulnerabilities because we have a solid CSRF defense.</p> |
| |
| <h3>List of Known Vulnerabilities</h3> |
| <ul class="iconsList"> |
| |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47501" target="external">CVE-2022-47501</a>; affected releases before 18.12.07; fixed in 18.12.07 with commit <a href="https://github.com/apache/ofbiz-plugins/commit/582add7d3" target="external">582add7d3</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25813" target="external">CVE-2022-25813</a>; affected releases before 18.12.06; fixed in 18.12.06 with commits <a href="https://github.com/apache/ofbiz-framework/commit/843b1c7e71" target="external">843b1c7e71</a>, <a href="https://github.com/apache/ofbiz-framework/commit/3797e60375" target="external">3797e60375</a>, <a href="https://github.com/apache/ofbiz-framework/commit/b24dcff344" target="external">b24dcff344</a>, <a href="https://github.com/apache/ofbiz-framework/commit/871ce2aa2e" target="external">871ce2aa2e</a>, <a href="https://github.com/apache/ofbiz-plugins/commit/829e1ca53" target="external">829e1ca53</a>, <a href="https://github.com/apache/ofbiz-framework/commit/16ed130367" target="external">16ed130367</a>, <a href="https://github.com/apache/ofbiz-framework/commit/5cc45e8701" target="external">5cc45e8701</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29063" target="external">CVE-2022-29063</a>; affected releases before 18.12.06; fixed in 18.12.06 with commit <a href="https://github.com/apache/ofbiz-plugins/commit/061252a80" target="external">061252a80</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29158" target="external">CVE-2022-29158</a>; affected releases before 18.12.06; fixed in 18.12.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/ff92c4bc9" target="external">ff92c4bc9</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25371" target="external">CVE-2022-25371</a>; affected releases before 18.12.06; fixed in 18.12.06 by temporarily disabling Birt component waiting for <a href="https://github.com/eclipse/birt/issues/625" target="external">https://github.com/eclipse/birt/issues/625 to be resolved</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25370" target="external">CVE-2022-25370</a>; affected releases before 18.12.06; fixed in 18.12.06 by temporarily disabling Birt component waiting for <a href="https://github.com/eclipse/birt/issues/625" target="external">https://github.com/eclipse/birt/issues/625 to be resolved</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105" target="external">CVE-2021-45105</a>; affected all releases before 17.12.09 and 18.12.04; fixed in 17.12.09 and 18.12.04 with commits <a href="https://github.com/apache/ofbiz-framework/commit/00896e7" target="external">00896e7</a>, <a href="https://github.com/apache/ofbiz-plugins/commit/c69bc8f" target="external">c69bc8f</a>, <a href="https://github.com/apache/ofbiz-framework/commit/4442c2a" target="external">4442c2a</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228" target="external">CVE-2021-44228</a>; affected all releases before 17.12.09 and 18.12.03; fixed in 17.12.09 and 18.12.03 with commits <a href="https://github.com/apache/ofbiz-framework/commit/00896e7" target="external">00896e7</a>, <a href="https://github.com/apache/ofbiz-plugins/commit/c69bc8f" target="external">c69bc8f</a>, <a href="https://github.com/apache/ofbiz-framework/commit/bccf140" target="external">bccf140</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37608" target="external">CVE-2021-37608</a>; affected all releases before 17.12.08; fixed in 17.12.08 with commit <a href="https://github.com/apache/ofbiz-framework/commit/8d49af4/" target="external">8d49af4</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30128" target="external">CVE-2021-30128</a>; affected all releases before 17.12.07; fixed in 17.12.07 with commits <a href="https://github.com/apache/ofbiz-framework/commit/643b9c7/" target="external">643b9c7</a> <a href="https://github.com/apache/ofbiz-plugins/commit/a343812/" target="external">a343812</a> <a href="https://github.com/apache/ofbiz-framework/commit/62e657f/" target="external">62e657f</a> <a href="https://github.com/apache/ofbiz-framework/commit/fcc0078/" target="external">fcc0078</a> <a href="https://github.com/apache/ofbiz-framework/commit/3f97578/" target="external">3f97578</a> <a href="https://github.com/apache/ofbiz-framework/commit/7fd9d05/" target="external">7fd9d05</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29200" target="external">CVE-2021-29200</a>; affected all releases before 17.12.07; fixed in 17.12.07 with commit <a href="https://github.com/apache/ofbiz-framework/commit/1bc8a20/" target="external">1bc8a20</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26295" target="external">CVE-2021-26295</a>; affected all releases before 17.12.07; fixed in 17.12.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/af9ed4e/" target="external">af9ed4e</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9496" target="external">CVE-2020-9496</a>; affected releases: 17.12.03; fixed in 17.12.04.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13923" target="external">CVE-2020-13923</a>; affected all releases before 17.12.04; fixed in 17.12.04.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12425" target="external">CVE-2019-12425</a>; affected releases: 17.12.01; fixed in 17.12.03 with commit <a href="//gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=793628b" target="external">793628b</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0235" target="external">CVE-2019-0235</a>; affected releases: 17.12.01; fixed in 17.12.03 with commits <a href="//gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=82ef7a5" target="external">82ef7a5</a>, <a href="//gitbox.apache.org/repos/asf?p=ofbiz-plugins.git;h=62f9b45" target="external">62f9b45</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1943" target="external">CVE-2020-1943</a>; affected releases: from 16.11.01 to 16.11.07; fixed in 17.12.01.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12426" target="external">CVE-2019-12426</a>; affected releases: from 16.11.01 to 16.11.06; fixed in 16.11.07 with revision <a href="//svn.apache.org/viewvc?view=revision&revision=1869887" target="external">1869887</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17200" target="external">CVE-2018-17200</a>; affected releases: from 16.11.01 to 16.11.05; fixed in 16.11.06 with revisions <a href="//svn.apache.org/viewvc?view=revision&revision=1850017" target="external">1850017</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1850019" target="external">1850019</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0189" target="external">CVE-2019-0189</a>; affected releases: from 16.11.01 to 16.11.05; fixed in 16.11.06 with revisions specified in <a href="//issues.apache.org/jira/browse/OFBIZ-10770" target="external">OFBIZ-10770</a>, <a href="//issues.apache.org/jira/browse/OFBIZ-10837" target="external">OFBIZ-10837</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10073" target="external">CVE-2019-10073</a>; affected releases: from 16.11.01 to 16.11.05; fixed in 16.11.06 with revisions <a href="//svn.apache.org/viewvc?view=revision&revision=1858438" target="external">1858438</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1858543" target="external">1858543</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1860595" target="external">1860595</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1860616" target="external">1860616</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10074" target="external">CVE-2019-10074</a>; affected releases: from 16.11.01 to 16.11.05; fixed in 16.11.06 with revision <a href="//svn.apache.org/viewvc?view=revision&revision=1858533" target="external">1858533</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8033" target="external">CVE-2018-8033</a>; affected releases: from 16.11.01 to 16.11.04; fixed in 16.11.05 with revisions <a href="//svn.apache.org/viewvc?view=revision&revision=1833708" target="external">1833708</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1836141" target="external">1836141</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3600" target="external">CVE-2011-3600</a>; affected releases: from 16.11.01 to 16.11.04; fixed in 16.11.05 with revisions <a href="//svn.apache.org/viewvc?view=revision&revision=1833724" target="external">1833724</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1833708" target="external">1833708</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1836141" target="external">1836141</a>.</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15714" target="external">CVE-2017-15714</a>; affected releases: from 16.11.01 to 16.11.03; fixed in 16.11.04 with revision <a href="//svn.apache.org/viewvc?view=revision&revision=1818482" target="external">1759065</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6800" target="external">CVE-2016-6800</a>; affected releases: 13.07.*, 12.04.*, 11.04.*; fixed in 16.11.01 with revisions <a href="//svn.apache.org/viewvc?view=revision&revision=1759065" target="external">1759065</a> and <a href="//svn.apache.org/viewvc?view=revision&revision=1759218" target="external"> 1759218</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4462" target="external">CVE-2016-4462</a>; affected releases: 13.07.*, 12.04.*, 11.04.*; fixed in 16.11.01 with revisions <a href="//svn.apache.org/viewvc?view=revision&revision=1761978" target="external">1761978</a>, <a href="//svn.apache.org/viewvc?view=revision&revision=1761986" target="external">1761986</a> and <a href="//svn.apache.org/viewvc?view=revision&revision=1761987" target="external"> 1761987</a></li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2170" target="external">CVE-2016-2170</a>; affected releases: 13.07.02 and earlier versions (13.07.*), 12.04.05 and earlier versions (12.04.*); fixed in 13.07.03 and 12.04.06</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3268" target="external">CVE-2015-3268</a>; affected releases: 13.07.02 and earlier versions (13.07.*), 12.04.05 and earlier versions (12.04.*); fixed in 13.07.03 and 12.04.06</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0232" target="external">CVE-2014-0232</a>; affected releases: 12.04.03 and earlier versions (12.04.*), 11.04.04 and earlier versions (11.04.*); fixed in 12.04.04 and 11.04.05</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2250" target="external">CVE-2013-2250</a>; affected releases: 12.04.01, 11.04.02 and earlier versions (11.04.*), 10.04.05 and earlier versions (10.04.*); fixed in 12.04.02, 11.04.03 and 10.04.06</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2137" target="external">CVE-2013-2137</a>; affected releases: 12.04.01, 11.04.02 and earlier versions (11.04.*), 10.04.05 and earlier versions (10.04.*); fixed in 12.04.02, 11.04.03 and 10.04.06</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0177" target="external">CVE-2013-0177</a>; affected releases: 11.04.01, 10.04.04 and earlier versions (10.04.*); fixed in 11.04.02 and 10.04.05</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3506" target="external">CVE-2012-3506</a>; affected releases: 10.04.02, 10.04 (10.04.01); fixed in 10.04.03</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1622" target="external">CVE-2012-1622</a>; affected releases: 10.04 (10.04.01); fixed in 10.04.02</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1621" target="external">CVE-2012-1621</a>; affected releases: 10.04 (10.04.01); fixed in 10.04.02</li> |
| <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0432" target="external">CVE-2010-0432</a>; affected releases: 09.04; fixed in 09.04.01</li> |
| </ul> |
| </div> |
| </div> |
| </div> |
| </section> |
| |
| <!-- content --> |
| <!-- footer --> |
| <footer class="footer1"> |
| <div class="container" id="footer"> |
| <div class="row"> |
| <div class="span6 timelineWidget"> |
| <h2>Latest tweets</h2> |
| <!-- |
| <div class="divider"><span></span></div> |
| <ul class="socialNetwork nav"> |
| <li> |
| <a href="//twitter.com/ApacheOfbiz" class="icon-twitter-bird socialIcon tips" |
| target="external" title="follow us on Twitter"><span>twitter</span></a> |
| </li> |
| <li><a href="//www.youtube.com/user/ofbiz" class="icon-play socialIcon tips" title="follow us on Youtube"><span>Youtube</span></a></li> |
| <li><a href="//www.facebook.com/Apache-OFBiz-1478219232210477/?ref=page_internal" class="icon-facebook socialIcon tips" title="follow us on Facebook"><span>facebook</span></a></li> |
| <li><a href="#" class="icon-rss socialIcon tips" title="Our rss feed"><span>rss feed</span></a></li> |
| <li><a href="#" class="icon-gplus socialIcon tips" title="follow us on Google +"><span>google +</span></a></li> |
| <li><a href="#" class="icon-instagram socialIcon tips" title="follow us on Instagram"><span>instagram</span></a></li> |
| <li><a href="#" class="icon-linkedin socialIcon tips" title="follow us on Linkedin"><span>linkedin</span></a></li> |
| <li><a href="#" class="icon-pinterest-circled socialIcon tips" title="follow us on Pinterest"><span>Pinterest</span></a></li> |
| </ul> |
| --> |
| <div id="twitterFrame"> <a class="twitter-timeline" href="//twitter.com/ApacheOfbiz?height=250" data-widget-id="588661945194192896" data-tweet-limit="2" data-theme="dark" data-chrome="nofooter noheader transparent" >Tweets by @ApacheOfbiz</a> |
| <script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+"://platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script> |
| </div> |
| </div> |
| <div class="span3 contactWidget"> |
| <h2>Contact Community</h2> |
| <div class="divider"><span></span></div> |
| <ul> |
| <li><a href="mailing-lists.html">Mailing Lists</a></li> |
| <li><a href="source-repositories.html">Source Repository (Git)</a></li> |
| <li><a href="https://s.apache.org/dsj2p" target="external">Issue Tracker (Jira)</a></li> |
| <li><a href="//www.youtube.com/user/ofbiz" target="external">OFBiz Youtube Channel</a></li> |
| <li><a href="//vimeo.com/channels/apacheofbiz" target="external">OFBiz Vimeo Channel</a></li> |
| <li> |
| <a href="//s.apache.org/ofbiz-slack-channel" target="external">OFBiz Chat</a><br/> |
| <span class="footer-note"> |
| Note: To chat with users and developers of Apache OFBiz. |
| <br>Please create a Slack account using <a href="//s.apache.org/slack-invite" target="external">this invite link</a> and |
| <a href="//s.apache.org/ofbiz-slack-channel" target="external">join the <b>#ofbiz channel</b>.</a> |
| Please do <b>not</b> ask OFBiz questions in the #general channel. |
| </span> |
| </li> |
| </ul> |
| </div> |
| <div class="span3 sociallWidget"> |
| <h2>ASF Information</h2> |
| <div class="divider"><span></span></div> |
| <ul> |
| <li><a href="https://www.apache.org/foundation/" target="external">Apache Software Foundation</a></li> |
| <li><a href="https://privacy.apache.org/policies/privacy-policy-public.html" target="external">Privacy Policy</a></li> |
| <li><a href="https://www.apache.org/events/current-event" target="external">Events</a></li> |
| <li><a href="https://www.apache.org/foundation/sponsorship.html" target="external">Sponsorship</a> |
| and <a href="https://www.apache.org/foundation/contributing.html" target="external">Donations</a> |
| </li> |
| <li><a href="https://www.apache.org/foundation/thanks.html" target="external">Thanks</a></li> |
| <li><a href="https://ofbiz.apache.org/security.html">Security</a></li> |
| <li><a href="https://www.apache.org/licenses/" target="external">License</a></li> |
| </ul> |
| </div> |
| </div> |
| </div> |
| </footer> |
| <footer class="footer2" id="footerRights"> |
| <div class="container"> |
| <div class="row"> |
| <div class="span12"> |
| <p> |
| Copyright © 2023 The Apache Software Foundation. |
| <a href="https://www.apache.org/licenses/" target="external">Licensed under the Apache License, Version 2.0</a>.<br/> |
| Apache OFBiz, OFBiz, the project logo and the Apache feather logo are trademarks of <a href="https://www.apache.org/" target="external">The Apache Software Foundation.</a> |
| </p> |
| </div> |
| </div> |
| </div> |
| </footer> |
| <!-- footer --> |
| </div> |
| <!-- globalWrapper --> |
| <script type="text/javascript" src="js/plugins/respond/respond.min.js"></script> |
| <script type="text/javascript" src="js/jquery-1.12.4.min.js"></script> |
| <script type="text/javascript" src="js/jquery-migrate-1.0.0.min.js"></script> |
| <script type="text/javascript" src="js/plugins/jquery-browser-plugin/jquery.browser.min.js"></script> |
| <!-- third party plugins --> |
| <script type="text/javascript" src="bootstrap/js/bootstrap.js"></script> |
| <script type="text/javascript" src="bootstrap/js/bootstrap-carousel.js"></script> |
| <script type="text/javascript" src="js/plugins/easing/jquery.easing.1.3.js"></script> |
| <script type="text/javascript" src="js/plugins/pretty-photo/js/jquery.prettyPhoto.js"></script> |
| <script type="text/javascript" src="js/plugins/hoverdir/jquery.hoverdir.js"></script> |
| <!-- jQuery KenBurn Slider --> |
| <script type="text/javascript" src="js/plugins/rs-plugin/js/jquery.themepunch.plugins.min.js"></script> |
| <script type="text/javascript" src="js/plugins/rs-plugin/js/jquery.themepunch.revolution.min.js"></script> |
| <!-- Custom --> |
| <script type="text/javascript" src="js/custom.js"></script> |
| <!-- Matomo --> |
| <script type="text/javascript"> |
| var _paq = window._paq = window._paq || []; |
| /* tracker methods like "setCustomDimension" should be called before |
| "trackPageView" */ |
| /* We explicitly disable cookie tracking to avoid privacy issues */ |
| _paq.push(['disableCookies']); |
| _paq.push(['trackPageView']); |
| _paq.push(['enableLinkTracking']); |
| (function() { |
| var u="https://analytics.apache.org/"; |
| _paq.push(['setTrackerUrl', u+'matomo.php']); |
| _paq.push(['setSiteId', '21']); |
| var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; |
| g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s); |
| })(); |
| </script> |
| <!-- End Matomo Code --> |
| </body> |
| </html> |
