Apache · Apache Ofbiz · CVE-2025-54466
Name of the Vulnerable Software and Affected Versions:
Apache OFBiz versions prior to 24.09.02
Description:
This issue involves improper control of code generation ('Code Injection') in the scrum plugin of Apache OFBiz, potentially leading to Remote Code Execution (RCE). Unauthenticated attackers can exploit this issue.
Recommendations:
Upgrade to version 24.09.02.