Unrated severityNVD Advisory· Published Nov 12, 2025· Updated Nov 12, 2025
Apache OFBiz: Reflected Cross-site Scripting
CVE-2025-61623
Description
Reflected cross-site scripting vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.03.
Users are recommended to upgrade to version 24.09.03, which fixes the issue.
Affected products
2- Apache Software Foundation/Apache OFBizv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- ofbiz.apache.org/security.htmlmitrepatch
- lists.apache.org/thread/sb2mngrg766qbqt5g29fo0qblk3v4x5ymitrevendor-advisory
- issues.apache.org/jira/browse/OFBIZ-13295mitreissue-tracking
- ofbiz.apache.org/download.htmlmitremitigation
- ofbiz.apache.org/release-notes-24.09.03.htmlmitrerelease-notes
News mentions
0No linked articles in our index yet.