CVE-2026-29207

Apache OFBiz versions prior to 24.09.06 are vulnerable to an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. This flaw is caused by the improper handling of special elements within the template engine, which can lead to Low-Privilege SSTI and Remote Code Execu...