← CVE Intelligence

CVE-2021-29200

RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI PUBLISHED

Description (CNA)

Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache OFBizaffected Apache OFBiz before 17.12.07

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.