CVE-2021-30128

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 17.12.07

Description The issue is related to unsafe deserialization, which can allow a remote attacker to execute arbitrary code by sending a specially crafted request. This can potentially lead to the recovery of unreliable data in memory.

Recommendations For versions prior to 17.12.07, update to version 17.12.07 or later to resolve the issue. As a temporary workaround, consider restricting access to the deserialization functionality until a patch is available.