You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2024/08/04 08:34:00 UTC

[jira] [Commented] (OFBIZ-13128) [CVE-2024-38856] Add permission check for ProgramExport and EntitySQLProcessor

    [ https://issues.apache.org/jira/browse/OFBIZ-13128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17870821#comment-17870821 ] 

ASF subversion and git services commented on OFBIZ-13128:
---------------------------------------------------------

Commit 6165267475dcc06c145e8cc522f7db5d6e3f73b7 in ofbiz-site's branch refs/heads/master from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-site.git;h=6165267 ]

[CVE-2024-38856] Add permission check for ProgramExport and EntitySQLProcessor (OFBIZ-13128)


> [CVE-2024-38856] Add permission check for ProgramExport and EntitySQLProcessor
> ------------------------------------------------------------------------------
>
>                 Key: OFBIZ-13128
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-13128
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: framework/webtools
>    Affects Versions: 18.12.14
>            Reporter: Jacques Le Roux
>            Assignee: Deepak Dixit
>            Priority: Minor
>             Fix For: 18.12.14
>
>
> If a user does not have the required permissions, the system should not execute the associated Groovy files. This improvement aims to enhance security by preventing unauthorized access to these functionalities.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)