CVE-2016-2170

Critical

Published: 12/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Apache OFBiz versions 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade Apache OFBiz to version 12.04.06 or 13.07.03 to mitigate this vulnerability.

Original NVD description (English source)

Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.