Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

Apache OFBiz: Path traversal leading to RCE

Apache OFBiz: Confused controller-view authorization logic (forced browsing)

Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE

Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin

Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz

Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

Pre-auth RCE in Apache Ofbiz 18.12.09

The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz allows an attacker to execute remote commands

Apache OFBiz has unsafe deserialization prior to 17.12.07 version

Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack

Apache OFBiz has unsafe deserialization prior to 17.12.06

An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field

The java.io.ObjectInputStream is known to cause Java serialisation issues

The Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpService endpoint

The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed

Apache OFBiz 10.04.x before 10.04.02 allows remote attackers to execute arbitrary code via unspecified vectors

Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache…

Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction

Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14

Possible path traversal in Apache OFBiz allowing authentication bypass

Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass

Apache OFBiz: DataResource Low-Privileged Authenticated FreeMarker Template Injection Leads to Remote Code Execution

Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution

Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper Neutralization of Special Elements Used in a Template Engine vulnerability…

Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks

By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a…

Apache OFBiz: Improper Input Validation in UI Factory Classes Leads to SSRF and Blind File Access

Apache OFBiz: Unauthenticated Shipment Label Image Disclosure

Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin

Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthenticated users

In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from…

In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the…

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that…

In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the…

Apache OFBiz: Low-Privilege SSRF in Content Component

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz

Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System Jobs

Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services

Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass

Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code Execution

Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component

Apache OFBiz: Low-Privilege LFI in Content Component

Reflected cross-site scripting vulnerability in Apache OFBiz