The GitHub Actions job "CodeQL" on ofbiz-framework.git has failed.
Run started by GitHub user asfgit (triggered by asfgit).

Head commit for run:
bb743ddff1fddbbea94c1415159f0d4d5013d592 / Jacques Le Roux 
<jacques.le.r...@les7arts.com>
Fixed: [SECURITY] (CVE-2024-36104) Path traversal leading to RCE (OFBIZ-13092)

Adds a StringUtil::splitWithStringSeparator. I crossed issue using
StringUtil::split it's said that <<delim the delimiter character(s)>> with a (s)
But it does not work as expected with several character(s).

In ControlFilter::doFilter uses splitWithStringSeparator instead of split.
Uses decoded requestUri everywhere, and to split query string, though it worked,
"&amp;" rather than "Y&amp;".
Also put all the privates methods used by doFilter just above it to clarify use.

Conflict handled by hand in StringUtil.java

Report URL: https://github.com/apache/ofbiz-framework/actions/runs/12826920674

With regards,
GitHub Actions via GitBox

Reply via email to