Apache OFBiz Improper Authorization Vulnerability in Webtools Allowing Low-Privileged Users to Submit System Jobs

A moderate improper authorization vulnerability has been identified in Apache OFBiz Webtools, affecting versions prior to 24.09.06. This vulnerability allows low-privileged users to submit system jobs, which could potentially be misused to execute unauthorized tasks within the application.

Impact

Exploitation of this vulnerability could lead to unauthorized submission of system jobs by low-privileged users, allowing them to execute tasks that could disrupt normal operations or access sensitive information.

Remediation

Users are advised to upgrade to Apache OFBiz version 24.09.06 or later, which addresses this vulnerability.