CVE-2019-12425 Archives - RedPacket Security

CVE-2019-12425

March 21, 2021

Summary: Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host Reference Links(if available): https://s.apache.org/7sr1x https://lists.apache.org/thread.html/r5181b36218225447d3ce70891eeccfb6d6885309dffd7e0e59091817@%3Cuser.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r907ce90745b52d2d5b6a815de03fd1d5f3831ab579a81d70cfda6f3d@%3Cuser.ofbiz.apache.org%3E...

CVE-2019-12425

CVE-2019-12425

HackerOne Bug Bounty Disclosure: bypass-upgrade-to-add-project-restriction-in-free-account-to-create-multiple-projects-without-upgrading-mrm-nk

CISA: Fortinet Releases Security Updates for FortiManager

[FOG] – Ransomware Victim: Village Community School (vcsnyc[.]org)

[MEDUSA] – Ransomware Victim: Broker Educational Sales & Training

[RANSOMHUB] – Ransomware Victim: tabocas[.]com[.]br

CVE-2019-12425

You may have missed

HackerOne Bug Bounty Disclosure: bypass-upgrade-to-add-project-restriction-in-free-account-to-create-multiple-projects-without-upgrading-mrm-nk

CISA: Fortinet Releases Security Updates for FortiManager

[FOG] – Ransomware Victim: Village Community School (vcsnyc[.]org)

[MEDUSA] – Ransomware Victim: Broker Educational Sales & Training

[RANSOMHUB] – Ransomware Victim: tabocas[.]com[.]br