High severity8.8NVD Advisory· Published Jun 10, 2026· Updated Jun 12, 2026
CVE-2026-50223
CVE-2026-50223
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user with Content/DataResource editing privileges to perform template injection attacks that could lead to Remote Code Execution.
This issue affects Apache OFBiz: before 24.09.07.
Users are recommended to upgrade to version 24.09.07, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- www.openwall.com/lists/oss-security/2026/06/10/13nvdMailing ListThird Party Advisory
- lists.apache.org/thread/trr2p4zokg54glqlhjnglt4yr7n8t5xdnvdMailing ListVendor Advisory
News mentions
0No linked articles in our index yet.