Apache OFBiz Reflected XSS Vulnerability (CVE-2020-1943) Scanner

If you are using Apache OFBiz, it is better to check your system if any vulnerability exists.

Details
Stay Up To Date
Asset Type

domain

Need Membership

Yes

Asset Verify

Yes

API Support

Yes

Estimate Time (Second)

30

Apache OFBiz Reflected XSS Vulnerability (CVE-2020-1943) Scanner Detail

If you are using Apache OFBiz, it is better to check your system if any vulnerability exists.

Sending data with contentID to /control/stream has vulnerability which allows XSS attacks. Affected Apache OFBiz versions are between 16.11.01 and 16.11.07.

Some Advice for Common Problems

Apache solved this vulnerability. Patch your Apache OFBiz to eliminate the vulnerability.

Need a Full Assesment?

Get help from professional hackers. Learn about our penetration test service now!

Request Pentest Service