PUBLISHED
2026-05-19 10:16
MODIFIED
2026-05-19 10:16
EPSS (Prob. Exploit)
0.63%
Top 50.4%
> DESCRIPTION
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.06.
Users are recommended to upgrade to version 24.09.06, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement - The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.
> HISTORIQUE DES MODIFICATIONS
Première apparition
19/05/2026 10:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') - The product constructs all or part of an expression language (EL) stat...
Nouvelle valeur:
CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement - The product constructs all or part of an expression language (EL) statement in a framework such as a Jav...
📊
ENRICHISSEMENT
01/06/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') - The product constructs all or part of an expression language (EL) stat...
Total des modifications: 2
Dernière mise à jour: 6 days ago