Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-31378 EUVD-2026-30856GHSA-r6v2-rh7v-5j2x

Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code Execution

Published May 19, 2026 · Updated May 19, 2026 · Assigned by apache