CVE-2026-114272

Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with role-scoped content view permission to read the data of content they are not authorized to view via a ViewSimpleContent reques...

CVE-2026-114272

Apache OFBiz versions 24.09 before 24.09.08 on all platforms are vulnerable to an authorization bypass in the content viewing component. An authenticated user with role-scoped content view permissions can access data they are not authorized to view by sending a ViewSimpleContent request. This req...