CVE-2020-13923: Medium severity apache ofbiz vulnerability
Published Jul 15, 2020
·Updated
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04
Affected Software
1 affected component
Apache OFBiz<17.12.04
Remediation
Event History
Jul 15, 2020
CVE Published
via MITRE·03:38 PM
Data Sourced
via MITRE·03:38 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-13923.
2
What is the severity of CVE-2020-13923?
The severity of CVE-2020-13923 is medium with a severity score of 5.3.
3
What is the affected software for CVE-2020-13923?
The affected software for CVE-2020-13923 is Apache OFBiz before version 17.12.04.
4
What is IDOR vulnerability?
IDOR vulnerability stands for Insecure Direct Object Reference vulnerability, which occurs when an application uses user-supplied input to access objects directly without any proper authorization.
5
How do I fix CVE-2020-13923?
To fix CVE-2020-13923, it is recommended to update Apache OFBiz to version 17.12.04 or higher.