VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 2, 2022· Updated Jun 17, 2026

CVE-2022-29158

CVE-2022-29158

Description

Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthenticated users. Upgrade to 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12599

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Apache/Ofbiz3 versions
    cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*range: <18.12.06
    • (no CPE)range: <=18.12.05
    • (no CPE)range: Apache OFBiz

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.