Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-31387 EUVD-2026-30869GHSA-3wxm-wq6x-mq3g

Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation

Published May 19, 2026 · Updated May 19, 2026 · Assigned by apache