[
https://issues.apache.org/jira/browse/OFBIZ-13158?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17899670#comment-17899670
]
Danny Trunk commented on OFBIZ-13158:
-------------------------------------
I guess you've referenced the wrong commit. Should be
[https://github.com/apache/ofbiz-framework/commit/f044a7e5bf] no?
Also in [https://ofbiz.apache.org/security.html] that wrong commit is referenced
> [SECURITY] (CVE-2024-47208) Update method to check if the string starts with
> component:// instead of merely containing it
> --------------------------------------------------------------------------------------------------------------------------
>
> Key: OFBIZ-13158
> URL: https://issues.apache.org/jira/browse/OFBIZ-13158
> Project: OFBiz
> Issue Type: Sub-task
> Components: framework/base
> Affects Versions: 18.12.16
> Reporter: Jacques Le Roux
> Assignee: Deepak Dixit
> Priority: Major
> Fix For: 18.12.17
>
>
> To work the component protocol must be placed at start of URL
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
