admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-07 11:07:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Apache OFBiz/CVE-2021-30128/README.md
gaopeng2 78f6cd1ef9 add vul demo
2021-05-18 14:14:09 +08:00

468 B
Raw Blame History

CVE-2021-30128 Apache OFBiz RCE

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.

Affected version: Apache OFBiz 17.12.06

FOFA query rule: header="Set-Cookie: OFBiz.Visitor"

Demo