EUVD-2025-25026

Malicious code in bioql PyPI...

CVE-2025-54466

Improper Control of Generation of Code 'Code Injection' vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used. Even unauthenticated attackers can exploit this vulnerability. Users are recommended t...

CVE-2025-54466

Improper Control of Generation of Code 'Code Injection' vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used. Even unauthenticated attackers can exploit this vulnerability. Users are recommended t...

CVE-2025-54466 Apache OFBiz: RCE Vulnerability in scrum plugin

Improper Control of Generation of Code 'Code Injection' vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used. Even unauthenticated attackers can exploit this vulnerability. Users are recommended t...

CVE-2025-54466 Apache OFBiz: RCE Vulnerability in scrum plugin

Improper Control of Generation of Code 'Code Injection' vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used. Even unauthenticated attackers can exploit this vulnerability. Users are recommended t...

CVE-2025-54466

CVE-2025-54466 involves an RCE in the Apache OFBiz Scrum plugin caused by improper control of code generation. Affected: Apache OFBiz versions prior to 24.09.02 when the Scrum plugin is used. Exploitation can be performed by unauthenticated attackers, potentially enabling remote code execution. R...

CVE-2025-54466 Apache OFBiz: RCE Vulnerability in scrum plugin

Improper Control of Generation of Code 'Code Injection' vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used. Even unauthenticated attackers can exploit this vulnerability. Users are recommended t...

CVE-2025-54466: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used. Even unauthenticated attackers can exploit this vulnerability. Users are recommended t...

PT-2025-31969 · Apache +1 · Apache Ofbiz +2

Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 24.09.02 Description: This issue involves improper control of code generation 'Code Injection' in the scrum plugin of Apache OFBiz, potentially leading to Remote Code Execution RCE. Unauthenticated attackers can...