Security Advisory

CVE-2021-26295

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-22 12:00:18
Last updated 2025-02-13 16:27:51
Assigner apache
State PUBLISHED

Description

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.