Vulnerability · Published Sep 2, 2022 · Assigned by apache

CVE-2022-25370Unauth Stored XSS vulnerability in the Birt plugin of Apache OFBiz

Medium 5.4

In plain English

A medium-severity cross-site scripting in Apache OFBiz from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 87% of all known vulnerabilities).

Severity (CVSS NVD)5.4Medium

Exploit odds (30 days)2.8%top 13.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. In Apache OFBiz release 18.12.05, and earlier versions, by leveraging a vulnerability in Birt (https://bugs.eclipse.org/bugs/show_bug.cgi?id=538142), an unauthenticated malicious user could perform a stored XSS attack in order to inject a malicious payload and execute it using the stored XSS.

Affected products (as reported)

Vendor	Product	Versions
Apache Software Foundation	Apache OFBiz	Apache OFBiz – through 18.12.05

Weakness: CWE-79

References

https://lists.apache.org/thread/vrvzokvxqtc4t6d7g8xgz89xpxcvjofh x_refsource_MISC
[oss-security] 20220902 Apache OFBiz - Unauth Stored XSS (CVE-2022-25370) mailing-list, x_refsource_MLIST
[oss-security] 20220903 Re: Apache OFBiz - Unauth Path Traversal with file corruption (CVE-2022-25371) mailing-list, x_refsource_MLIST