virus logo Intrusion Prevention

Apache.OFBiz.CVE-2021-30128.Insecure.Deserialization

description-logoDescription

This indicates an attack attempt to exploit an Insecure Deserialization Vulnerability in Apache Software Foundation OFBiz.
This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request. Successful exploitation would result in arbitrary code execution.

affected-products-logoAffected Products

Apache Software Foundation OFBiz prior to 17.12.07

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2021-05-20 18.083 Default_action:pass:drop
2021-05-13 18.079
ID 50274
Created May 05, 2021
Updated Oct 13, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
CVE ID CVE-2021-30128
Exploit Prediction Score 59.41%
Default Action drop
Active
Affected OS All
Affected App Apache