CVE-2021-30128
Unsafe deserialization in Apache OFBiz
- State
- Published
- Severity
- Not scored
- Published
- Apr 27, 2021
- Updated
- Aug 3, 2024
- Reserved
- Apr 5, 2021
Description
Apache OFBiz has unsafe deserialization prior to 17.12.07 version
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Apache OFBizApache Software Foundation |
|
References
- https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E
- [ofbiz-notifications] 20210427 [jira] [Updated] (OFBIZ-12221) Fixed ObjectInputStream denyList [CVE-2021-30128]mailing-list
- [ofbiz-notifications] 20210427 [jira] [Updated] (OFBIZ-12212) Comment out the SOAP and HTTP engines - Fix [CVE-2021-30128]mailing-list
- [oss-security] 20210427 [CVE-2021-30128] Unsafe deserialization in OFBizmailing-list
- [ofbiz-user] 20210427 [CVE-2021-30128] Unsafe deserialization in OFBizmailing-list
- [ofbiz-commits] 20210427 [ofbiz-site] branch master updated: Updates security page for CVE-2021-29200 and 30128 fixed in 17.12.07mailing-list
- [announce] 20210427 [CVE-2021-30128] Unsafe deserialization in OFBizmailing-list
- [ofbiz-notifications] 20210605 [jira] [Updated] (OFBIZ-12212) Comment out the SOAP and HTTP engines - Fix [CVE-2021-30128]mailing-list
- [ofbiz-notifications] 20210729 [jira] [Updated] (OFBIZ-12212) Comment out the SOAP and HTTP engines - Fix [CVE-2021-30128]mailing-list
- [ofbiz-commits] 20210811 [ofbiz-site] branch master updated: Updates security page for CVE-2021-37608 fixed in 17.12.08mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.