Apache OFBiz Sensitive Information Disclosure Vulnerability

Vulnerability

A vulnerability in Apache OFBiz prior to version 24.09.06 allows for the unauthorized exposure of sensitive information. This issue has been reported by Dohyun Yun.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users are advised to upgrade to Apache OFBiz version 24.09.06 or later, which addresses this vulnerability.

Added: May 19, 2026, 10:27 AM
Updated: May 19, 2026, 10:27 AM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
2.5
exploitability
7.4
remediation
3.1
relevance
8.7
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.