CVE-2014-0232: XSS
Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1) result or (2) error message.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0232?
CVE-2014-0232 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2014-0232?
To fix CVE-2014-0232, upgrade Apache OFBiz to version 11.04.05 or later, or 12.04.04 or later.
What versions of Apache OFBiz are affected by CVE-2014-0232?
CVE-2014-0232 affects Apache OFBiz versions 11.04.01 to 11.04.04 and 12.04.01 to 12.04.03.
What types of attacks can CVE-2014-0232 facilitate?
CVE-2014-0232 allows remote attackers to inject arbitrary web scripts or HTML, enabling cross-site scripting (XSS) attacks.
Is there a workaround for CVE-2014-0232?
There are no official workarounds for CVE-2014-0232; upgrading to a patched version is the recommended solution.