CVE-2021-26295

Publication date

2021-03-22 12:00:18

Family

apache

State

PUBLISHED

Description

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.