From 3ffd17fce4ea83122c6b331e109f19b9963bc79d Mon Sep 17 00:00:00 2001
From: MostInterestingBotInTheWorld
 <98333686+MostInterestingBotInTheWorld@users.noreply.github.com>
Date: Tue, 17 May 2022 10:14:56 -0400
Subject: [PATCH] Enhancement: cves/2021/CVE-2021-26295.yaml by mp

---
 cves/2021/CVE-2021-26295.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/cves/2021/CVE-2021-26295.yaml b/cves/2021/CVE-2021-26295.yaml
index aa20e3cce4..8324689a64 100644
--- a/cves/2021/CVE-2021-26295.yaml
+++ b/cves/2021/CVE-2021-26295.yaml
@@ -1,7 +1,7 @@
 id: CVE-2021-26295
 
 info:
-  name: Apache OFBiz RMI deserializes Arbitrary Code Execution
+  name: Apache OFBiz <17.12.06 - Arbitrary Code Execution
   author: madrobot
   severity: critical
   description: Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.
@@ -9,6 +9,7 @@ info:
     - https://github.com/yumusb/CVE-2021-26295-POC
     - https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E
     - https://lists.apache.org/thread.html/r6e4579c4ebf7efeb462962e359501c6ca4045687f12212551df2d607@%3Cnotifications.ofbiz.apache.org%3E
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-26295
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
@@ -61,3 +62,5 @@ requests:
           - "errorMessage"
         part: body
         condition: and
+
+# Enhanced by mp on 2022/05/17