Enhancement: cves/2021/CVE-2021-30128.yaml by md

cves/2021/CVE-2021-30128.yaml

@@ -4,12 +4,12 @@ info:
   name: Apache OFBiz <17.12.07 - Arbitrary Code Execution
   author: For3stCo1d
   severity: critical
-  description: Apache OFBiz has unsafe deserialization prior to 17.12.07 version
+  description: Apache OFBiz before 17.12.07 is susceptible to arbitrary code execution via unsafe deserialization. An attacker can modify deserialized data or code without using provided accessor functions.
   reference:
     - https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d@%3Ccommits.ofbiz.apache.org%3E
-    - https://nvd.nist.gov/vuln/detail/CVE-2021-30128
     - https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E
     - https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743@%3Cdev.ofbiz.apache.org%3E
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-30128
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
     cvss-score: 9.8
@@ -56,3 +56,5 @@ requests:
         part: body
         words:
           - 'value="errorMessage"'
+
+# Enhanced by md on 2023/03/21