Enhancement: cves/2021/CVE-2021-26295.yaml by mp

cves/2021/CVE-2021-26295.yaml

@@ -1,7 +1,7 @@
 id: CVE-2021-26295
 
 info:
-  name: Apache OFBiz RMI deserializes Arbitrary Code Execution
+  name: Apache OFBiz <17.12.06 - Arbitrary Code Execution
   author: madrobot
   severity: critical
   description: Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.
@@ -9,6 +9,7 @@ info:
     - https://github.com/yumusb/CVE-2021-26295-POC
     - https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E
     - https://lists.apache.org/thread.html/r6e4579c4ebf7efeb462962e359501c6ca4045687f12212551df2d607@%3Cnotifications.ofbiz.apache.org%3E
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-26295
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
@@ -61,3 +62,5 @@ requests:
           - "errorMessage"
         part: body
         condition: and
+
+# Enhanced by mp on 2022/05/17