Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId, (2) contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown impact.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Open For Business Project 电子商务组件未明权限漏洞
Vulnerability Description
Apache Open For Business Project (OFBiz)的电子商务组件的论坛实施中信任(1)dataResourceTypeId，(2)contentTypeId和某些其他隐藏表单字段，远程攻击者可创建未授权的内容类型、修改内容或者有其他未知影响。
CVSS Information
N/A
Vulnerability Type
N/A