Vulnerability · Published Jul 15, 2020 · Assigned by apache
CVE-2020-13923
Medium 5.3
In plain English
A medium-severity security flaw in Apache OFBiz. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.0% (higher than 92% of all known vulnerabilities).
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)5.0%top 7.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Apache OFBiz | Apache OFBiz 17.12.03 and earlier versions |
References
- https://s.apache.org/chokl x_refsource_MISC
- [announce] 20200715 [CVE-2020-13923] IDOR in Apache OFBiz mailing-list, x_refsource_MLIST
- [ofbiz-notifications] 20200716 [jira] [Updated] (OFBIZ-11836) IDOR vulnerability in the order processing feature in ecommerce component (CVE-2020-13923) mailing-list, x_refsource_MLIST
- [ofbiz-commits] 20210321 [ofbiz-site] branch master updated: Updates security page for CVE-2021-26295 fixed in 17.12.06 mailing-list, x_refsource_MLIST
- [ofbiz-commits] 20210427 [ofbiz-site] branch master updated: Updates security page for CVE-2021-29200 and 30128 fixed in 17.12.07 mailing-list, x_refsource_MLIST