CVE-2019-12425: 
Apache OFBiz vulnerability analysis and mitigation

CVE-2019-12425 is a vulnerability affecting Apache OFBiz version 17.12.01. The vulnerability was discovered and assigned on May 28, 2019, and was publicly disclosed on April 30, 2020. The issue involves a Host header injection vulnerability where the system accepts arbitrary host headers (NVD).

The vulnerability is classified as CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component). It received a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, indicating that it is network-accessible, requires low attack complexity, needs no privileges, and can result in high impact to integrity (NVD).

The vulnerability allows attackers to perform Host header injection attacks, which could potentially lead to high-severity integrity impacts. The CVSS scoring indicates that while there is no impact on confidentiality or availability, the vulnerability can significantly affect the system's integrity (NVD).

The vulnerability is characterized by network accessibility (AV:N) with low attack complexity (AC:L) and requires no privileges or user interaction to exploit, making it relatively straightforward to exploit if unpatched (NVD).