CVE-2026-82902 | Apache OFBiz up to 24.09.07 ViewDataFile ViewDataFile.groovy DEFINITION_LOCATION/DATAFILE_LOCATION server-side request forgery

A vulnerability categorized as critical has been discovered in Apache OFBiz up to 24.09.07. The impacted element is an unknown function of the file ViewDataFile.groovy of the component ViewDataFile. The manipulation of the argument DEFINITION_LOCATION/DATAFILE_LOCATION results in server-side request forgery.

This vulnerability is known as CVE-2026-82902. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More