daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2021/CVE-2021-26295.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-17 15:12:32 -04:00
parent 0156dc6b94
commit 4b0675fa28
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cves/2021/CVE-2021-26295.yaml
View File

@ -4,7 +4,7 @@ info:
name: Apache OFBiz <17.12.06 - Arbitrary Code Execution name: Apache OFBiz <17.12.06 - Arbitrary Code Execution
author: madrobot author: madrobot
severity: critical severity: critical
description: Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz. description: Apache OFBiz has unsafe deserialization prior to 17.12.06 which can allow an unauthenticated attacker to successfully take over Apache OFBiz.
reference: reference:
- https://github.com/yumusb/CVE-2021-26295-POC - https://github.com/yumusb/CVE-2021-26295-POC
- https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E
@ -63,4 +63,5 @@ requests:
part: body part: body
condition: and condition: and
# Enhanced by mp on 2022/05/17 # Enhanced by mp on 2022/05/17