CVE record · 1 source
CVE-2026-71901
Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz.
- Vendor
- Apache Software Foundation
- Product
- Apache OFBiz
- Weakness
- CWE-99
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz.
Improper Control of Resource Identifiers ('Resource Injection') vulnerability in Apache OFBiz. An authenticate user with access to sfa component can override the service to use on vcard import and access to other service. This…