CVE-2026-31910

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz before version 24.09.06 allows an attacker to use the server to send requests to internal or external resources.

Risk Assessment

Exploitation of this vulnerability may lead to the disclosure of sensitive data or attacks on other services within the organization's network.

Recommendation

It is recommended to upgrade to version 24.09.06, which fixes the issue.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue.