CyberSec.Space Logo
CVEブラウザに戻る

CVE-2025-61623

MEDIUM
6.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-11-12
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue.

Affected Platforms (CPE)

📦
Apache

Ofbiz

< 24.09.03

References & Advisories

🔗 https://issues.apache.org/jira/browse/OFBIZ-13295
🔗 https://lists.apache.org/thread/sb2mngrg766qbqt5g29fo0qblk3v4x5y
🔗 https://ofbiz.apache.org/download.html
🔗 https://ofbiz.apache.org/release-notes-24.09.03.html
🔗 https://ofbiz.apache.org/security.html
🔗 http://www.openwall.com/lists/oss-security/2025/11/11/2

関連する脆弱性情報

CVE-2026-502238.8

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user...

CVE-2026-473428.8

A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges Thi...

CVE-2025-591187.3

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. ...

CVE-2025-544669.8

Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. T...