Apache OFBiz RCE Flaw Abuses Password
Source: Gbhackers
Published:
<p>A critical authentication bypass vulnerability in Apache OFBiz allows attackers to hijack forced password-change flows and achieve remote code execution (RCE) via a single HTTP request, affecting all versions before 24.09.06.</p> <p>Apache OFBiz is an open-source Enterprise Resource Planning (ERP