Description
Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Apache OFBiz | Apache Software Foundation / Apache OFBiz | >= 0, <= 18.12.14 | affected |
| ofbiz | apache / ofbiz | >= 0, <= 18.12.14 | affected |