Improved: post-auth Remote Code Execution Vulnerability
Temporarily comments out XMLRPC tests.
I'll work on a definitive solution ASAP
@@ -67,12 +67,13 @@ under the License.
<entity-xml action="assert" entity-xml-url="component://service/testdef/data/ServiceEcaGlobalEventAssertData.xml"/>
</test-case>
- <test-case case-name="service-xml-rpc">
+<!-- Because of "post-auth Remote Code Execution Vulnerability" (OFBIZ-12332), Temporarily comments out XMLRPC tests. -->
+<!-- <test-case case-name="service-xml-rpc">
<junit-test-suite class-name="org.apache.ofbiz.service.test.XmlRpcTests"/>
</test-case>
<test-case case-name="service-xml-rpc-local-engine">
<service-test service-name="testXmlRpcClientAdd"/>
- </test-case>
+ </test-case> -->
<test-case case-name="load-data-service-permission-tests">
<entity-xml entity-xml-url="component://service/testdef/data/PermissionServiceTestData.xml"/>
</test-case>
