Apache OFBiz FlexibleStringExpander Remote Code Execution

The version of Apache OFBiz hosted on the remote host has an arbitrary code execution vulnerability. Specially crafted input passed to the getInstance method of the FlexibleStringExpander class can result in the evaluation of nested Java Unified Expression Language expressions. A remote,...