[
https://issues.apache.org/jira/browse/OFBIZ-13158?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17899701#comment-17899701
]
ASF subversion and git services commented on OFBIZ-13158:
---------------------------------------------------------
Commit 1f64246fe4cd8f8bc958075932bf04401d936976 in ofbiz-site's branch
refs/heads/master from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-site.git;h=1f64246 ]
Improved: corrects information about new release 18.12.17
Thanks: Danny trunk at https://issues.apache.org/jira/browse/OFBIZ-13158
> [SECURITY] (CVE-2024-47208) Update method to check if the string starts with
> component:// instead of merely containing it
> --------------------------------------------------------------------------------------------------------------------------
>
> Key: OFBIZ-13158
> URL: https://issues.apache.org/jira/browse/OFBIZ-13158
> Project: OFBiz
> Issue Type: Sub-task
> Components: framework/base
> Affects Versions: 18.12.16
> Reporter: Jacques Le Roux
> Assignee: Deepak Dixit
> Priority: Major
> Fix For: 18.12.17
>
>
> To work the component protocol must be placed at start of URL
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
