iDempiere Security Notification

[Carlos Antonio Ruiz Gómez]

Hello community,

This is not an april fool's joke!

Two vulnerabilities have been discovered on iDempiere code (affecting also installations of Adempiere and Compiere)

Please take a look to IDEMPIERE-1784 and IDEMPIERE-1834 for workaround and mitigation.

This notification is following the Phased Disclosure approach described in the Vulnerability Management process for iDempiere.

Please note the objective of a phased disclosure is to provide community the opportunity to upgrade within a reasonable maintenance window to minimize rushed action and operational anxiety.

Regards,

Carlos Ruiz