Threats tagged 'ghsa-3m3m-rr3j-qmjv'

A Server-Side Request Forgery (SSRF) vulnerability exists in the SurveyWrapper component of Apache OFBiz 24.09 versions prior to 24.09.08. An authenticated back-office user with catalog permission can cause the server to fetch and render arbitrary URLs, including internal network resources and local files, by setting a product-store survey's template location to an attacker-controlled URL. The fetched content is compiled and rendered as a FreeMarker template without validation of the URL scheme or host, leading to non-blind disclosure to any shopper loading the affected survey. Upgrading to version 24.09.08 resolves this issue.