You are viewing a plain text version of this content. The canonical link for it is here.
- Re: Modern PWA Picking Application for OFBiz (AI-Assisted) - posted by Arun Patidar <ar...@hotwax.co> on 2026/05/01 12:21:58 UTC, 2 replies.
- (OFBIZ-13262) Introducing inventory reservations for production run tasks of manufacturing module - posted by Divesh Dutta <di...@hotwaxsystems.com> on 2026/05/07 08:39:49 UTC, 2 replies.
- [ANNOUNCE] Apache OFBiz 24.09.06 released - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 07:32:57 UTC, 0 replies.
- CVE-2026-29207: Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:29:20 UTC, 0 replies.
- CVE-2026-29220: Apache OFBiz: Low-Privilege LFI in Content Component - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:30:17 UTC, 0 replies.
- CVE-2026-29226: Apache OFBiz: Low-Privilege SSRF in Content Component - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:30:39 UTC, 0 replies.
- CVE-2026-31378: Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code Execution - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:31:00 UTC, 0 replies.
- CVE-2026-31379: Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog Manager - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:31:23 UTC, 0 replies.
- CVE-2026-31380: Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:31:45 UTC, 0 replies.
- CVE-2026-31387: Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:32:06 UTC, 0 replies.
- CVE-2026-31388: Apache OFBiz: Cross-Tenant Data Exposure via Program Export Feature - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:32:29 UTC, 0 replies.
- CVE-2026-31906: Apache OFBiz: Reflected XSS via Improper HTML Attribute Escaping in Layered-Modal Dialog Parameters - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:33:24 UTC, 0 replies.
- CVE-2026-31909: Apache OFBiz: Unauthenticated Shipment Label Image Disclosure - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:33:44 UTC, 0 replies.
- CVE-2026-31910: Apache OFBiz: Improper Input Validation in UI Factory Classes Leads to SSRF and Blind File Access - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:34:03 UTC, 0 replies.
- CVE-2026-31986: Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:34:27 UTC, 0 replies.
- CVE-2026-35086: Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:34:59 UTC, 0 replies.
- CVE-2026-41919: Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction - posted by Jacopo Cappellato <ja...@apache.org> on 2026/05/19 08:35:23 UTC, 0 replies.
- Re: Improvement Proposals and Jira Updates for Apache OFBiz Manufacturing Module - posted by Divesh Dutta <di...@hotwaxsystems.com> on 2026/05/26 06:45:16 UTC, 0 replies.
- [DISCUSS] Building an Apache OFBiz Business Advisory Committee - posted by Divesh Dutta <di...@hotwaxsystems.com> on 2026/05/29 11:28:05 UTC, 1 replies.