Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.APACHE_OFBIZ_CVE-2021-26295.NBIN
HistoryMar 30, 2021 - 12:00 a.m.

Apache OFBiz Remote Code Execution (CVE-2021-26295)

2021-03-3000:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
28

A remote code execution vulnerability exists in Apache OFBiz prior to 17.12.06 due to Deserialization of Untrusted Data.
An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on the target system.

Binary data apache_ofbiz_cve-2021-26295.nbin
VendorProductVersionCPE
apacheofbizcpe:/a:apache:ofbiz