This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a change to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git.
from 02a544a Improved: post-auth Remote Code Execution Vulnerability
(OFBIZ-12332)
new 25293e4 Fixed: post-auth Remote Code Execution Vulnerability
(OFBIZ-12332)
new a1a24bd Fixed: post-auth Remote Code Execution Vulnerability
(OFBIZ-12332)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../org/apache/ofbiz/base/util/CacheFilter.java | 115 +++++++++++++
.../org/apache/ofbiz/base/util/RequestWrapper.java | 184 +++++++++++++++++++++
framework/service/testdef/servicetests.xml | 7 +-
.../apache/ofbiz/webapp/control/ContextFilter.java | 8 -
framework/webtools/webapp/webtools/WEB-INF/web.xml | 9 +
5 files changed, 311 insertions(+), 12 deletions(-)
create mode 100644
framework/base/src/main/java/org/apache/ofbiz/base/util/CacheFilter.java
create mode 100644
framework/base/src/main/java/org/apache/ofbiz/base/util/RequestWrapper.java
