oss-sec mailing list archives

CVE-2026-47342: Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass

From: Jacopo Cappellato <jacopoc () apache org>
Date: Wed, 10 Jun 2026 16:39:24 +0000

Severity: moderate 

Affected versions:

- Apache OFBiz before 24.09.07

Description:

A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher 
privileges



This issue affects Apache OFBiz: before 24.09.07.

Users are recommended to upgrade to version 24.09.07, which fixes the issue.

Credit:

Le Huynh Duc (lwd3c) (finder)

References:

https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-47342

Current thread:

CVE-2026-47342: Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass Jacopo Cappellato (Jun 10)