Логотип exploitDog
bind:CVE-2025-26865
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-26865

Количество 3

Количество 3

nvd логотип

CVE-2025-26865

11 месяцев назад

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only official releases should be used. In other words, if you use 18.12.17 you are still safe. The version 18.12.17 is not a affected. But something between 18.12.17 and 18.12.18 is. In that case, users are recommended to upgrade to version 18.12.18, which fixes the issue.

CVSS3: 3.5
EPSS: Низкий
github логотип

GHSA-p9r8-xjx7-v86q

11 месяцев назад

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only official releases should be used. In other words, if you use 18.12.17 you are still safe. The version 18.12.17 is not a affected. But something between 18.12.17 and 18.12.18 is. In that case, users are recommended to upgrade to version 18.12.18, which fixes the issue.

CVSS3: 3.5
EPSS: Низкий
fstec логотип

BDU:2025-02579

12 месяцев назад

Уязвимость программного обеспечения планирования ресурсов предприятия Apache OFBiz, связанная с неправильной нейтрализацией специальных элементов, используемых в шаблонизаторе, позволяющая нарушителю выполнить произвольный код

CVSS3: 3.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-26865

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only official releases should be used. In other words, if you use 18.12.17 you are still safe. The version 18.12.17 is not a affected. But something between 18.12.17 and 18.12.18 is. In that case, users are recommended to upgrade to version 18.12.18, which fixes the issue.

CVSS3: 3.5
0%
Низкий
11 месяцев назад
github логотип
GHSA-p9r8-xjx7-v86q

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18.   It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only official releases should be used. In other words, if you use 18.12.17 you are still safe. The version 18.12.17 is not a affected. But something between 18.12.17 and 18.12.18 is. In that case, users are recommended to upgrade to version 18.12.18, which fixes the issue.

CVSS3: 3.5
0%
Низкий
11 месяцев назад
fstec логотип
BDU:2025-02579

Уязвимость программного обеспечения планирования ресурсов предприятия Apache OFBiz, связанная с неправильной нейтрализацией специальных элементов, используемых в шаблонизаторе, позволяющая нарушителю выполнить произвольный код

CVSS3: 3.5
0%
Низкий
12 месяцев назад

Уязвимостей на страницу