You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Jacques Le Roux (Jira)" <ji...@apache.org> on 2023/12/04 18:01:00 UTC

[jira] [Updated] (OFBIZ-12812) [SECURITY] Remove deprecated Apache XML-RPC related code (CVE-2023-49070)

     [ https://issues.apache.org/jira/browse/OFBIZ-12812?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux updated OFBIZ-12812:
------------------------------------
    Summary: [SECURITY] Remove deprecated Apache XML-RPC related code (CVE-2023-49070)  (was: Remove deprecated Apache XML-RPC related code)

> [SECURITY] Remove deprecated Apache XML-RPC related code (CVE-2023-49070)
> -------------------------------------------------------------------------
>
>                 Key: OFBIZ-12812
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12812
>             Project: OFBiz
>          Issue Type: Task
>          Components: framework/service
>    Affects Versions: Upcoming Branch
>            Reporter: Deepak Dixit
>            Assignee: Deepak Dixit
>            Priority: Major
>             Fix For: Upcoming Branch
>
>
> Apache XML-RPC is no longer maintained[1], we should remove the xml rpc related code from trunk.
>  
> [1] https://github.com/advisories/GHSA-6vwp-35w3-xph8



--
This message was sent by Atlassian Jira
(v8.20.10#820010)