[ https://issues.apache.org/jira/browse/OFBIZ-13219?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17940254#comment-17940254 ]
ASF subversion and git services commented on OFBIZ-13219: --------------------------------------------------------- Commit ab536e0a562931b9a567a8153633bdbdc8d9bb7d in ofbiz-site's branch refs/heads/master from Jacques Le Roux [ https://gitbox.apache.org/repos/asf?p=ofbiz-site.git;h=ab536e0 ] Fixed: [CVE-2025-30676] Only accept right URLs as referrer (OFBIZ-13219) Completes previous commit by Nicolas that was missing the 2nd OFBIZ-13219 commit to fix VisitDetail.ftl and concerned all before 18.12.19 (not only between 18.12.18 and 18.12.19) Conflicts handled by hand > [CVE-2025-30676] Only accept right URLs as referrer > --------------------------------------------------- > > Key: OFBIZ-13219 > URL: https://issues.apache.org/jira/browse/OFBIZ-13219 > Project: OFBiz > Issue Type: Sub-task > Components: framework/webapp, party > Affects Versions: 18.12.18 > Reporter: Jacques Le Roux > Assignee: Jacques Le Roux > Priority: Minor > Fix For: 18.12.19 > > -- This message was sent by Atlassian Jira (v8.20.10#820010)