| Package | Affected versions | Patched versions |
|---|---|---|
| ofbiz | ≥ 12.04, < 12.04.06≥ 13.07, < 13.07.03 | 12.04.0613.07.03 |
Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free