CVE-2025-26865

creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7004 2025-03-10 15:40:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jwmfl2m 2025-03-10 15:51:18+00:00| seen|...

CVE-2025-26865

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18. It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only...

CVE-2025-26865

Apache OFBiz is vulnerable to Server-Side Template Injection (SSTI) in the FreeMarker template engine due to a regression between versions 18.12.17 and 18.12.18 . Specifically, the vulnerability affects the "ecommerce" plugin , reopening a previously fixed issue (CVE-2022-25813). If successfully ...