openboxes v0.9.8 Patch: Product Import Error Handling Vulnerabilities Fix

Vulnerability Overview In version of the project, the following security vulnerabilities were fixed: 1. GHSA-8wx5-vghp-jpcq - Discovered by: @nedilr - Description: This vulnerability relates to the product import functionality, which throws an error when the category assigned to the product does not exist. 2. GHSA-829r-3vx8-65wx - Discovered by: @nedilr - Description: This vulnerability relates to the product import functionality, which throws an error when the category assigned to the product does not exist. 3. GHSA-9nw-k2p-p2q7 - Discovered by: @nedilr - Description: This vulnerability relates to the product import functionality, which throws an error when the category assigned to the product does not exist. Scope of Impact These vulnerabilities affect version of the project, with the specific impact being: Product Import Functionality: When the category assigned to the product does not exist, the system throws an error, resulting in product import failure. Remediation To fix these vulnerabilities, the project implemented the following updates: 1. Changes to Product Import Behavior: - Product import now throws an error when the category assigned to the product does not exist. - To retain the previous product import behavior (i.e., creating any non-existent categories), you can set the following application property: 2. Other Updates: - The project also includes other functional and bug fixes; for details, see the Release Notes v0.9.8. Summary Version of the project fixes three security-related issues, primarily concerning error handling in the product import functionality when assigned categories do not exist. Users can retain the legacy behavior by setting a specific application property. Detailed update information and recommended remediation steps are provided in the release notes.

Goal Reached Thanks to every supporter — we hit 100%!

openboxes v0.9.8 Patch: Product Import Error Handling Vulnerabilities Fix

More from this source