漏洞描述
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
lists.apache.orghttps://lists.apache.org/thread/k8s76l0whydy45bfm4b69vq0mf94p3wc↗www.openwall.comhttp://www.openwall.com/lists/oss-security/2023/04/18/5↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-47501↗www.openwall.comhttp://www.openwall.com/lists/oss-security/2023/04/18/9↗www.openwall.comhttp://www.openwall.com/lists/oss-security/2023/04/19/1↗