cbcvebase.
CVE-2021-30128
published 2021-04-27

CVE-2021-30128: Apache OFBiz has unsafe deserialization prior to 17.12.07 version

critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EXPLOIT
Apache OFBiz has unsafe deserialization prior to 17.12.07 version

Affected

3 ranges
VendorProductVersion rangeFixed in
apacheofbiz< 17.12.0717.12.07
apacheofbiz
apache_software_foundationapache_ofbiz>= Apache OFBiz < 17.12.0717.12.07