Volerion logoVolerion
Volerion logoVolerion

Apache OFBiz Improper Authentication Vulnerability Allowing JWT Forgery and Account Impersonation

Vulnerability

A vulnerability allowing improper authentication has been identified in Apache OFBiz versions prior to 24.09.06. This issue can be exploited to manipulate cookies, leading to authenticated JSON Web Token (JWT) forgery and account impersonation.

Impact

Exploitation of this vulnerability allows for authenticated JWT forgery, enabling account impersonation.

Remediation

Users are advised to upgrade to Apache OFBiz version 24.09.06 or later, which addresses this vulnerability.

Added: May 19, 2026, 10:28 AM
Updated: May 19, 2026, 10:28 AM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
1.3
exploitability
6.6
remediation
3.1
relevance
8.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.