Apache Open For Business Project (aka OFBiz) 10.04.01 up to and including 10.04.05, 11.04.01 up to and including 11.04.02, and 12.04.01 allows remote malicious users to execute arbitrary Unified Expression Language (UEL) functions via JUEL metacharacters in unspecified parameters, related to nested expressions.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apache ofbiz 10.04.01 |
||
apache ofbiz 10.04.02 |
||
apache ofbiz 10.04.03 |
||
apache ofbiz 10.04.04 |
||
apache ofbiz 10.04.05 |
||
apache ofbiz 11.04.01 |
||
apache ofbiz 11.04.02 |
||
apache ofbiz 12.04.01 |
Vulmon