Week after repored critical issue, Apache OFBiz actively attacked
Take action: This is now an urgent action: If you are using Apache OfBiz, lock down access from the internet, then patch ASAP. Automated attacks have already started. Do your part not to get hacked.
Learn More
A week after the report of a critical issue in Apache OFBiz platform, SonicWall researchers have detected significant increase in exploitation attempts.
Apache OFBiz is an extensively utilized open source ERP, which is also incorporated into Atlassian's Jira software, a tool employed by over 120,000 organizations.
Atlassian has clarified that Jira’s custom OFBiz Entity Engine does not use the vulnerable module.
Apache OFBiz users are urgently advised to update to version 18.12.11 or later. o enhance security, users are recommended to follow best practices such as limiting system exposure and maintaining a consistent update schedule.
Update - Cybersecurity researchers have developed a proof-of-concept (PoC) code that exploits a recently disclosed critical flaw in the Apache OfBiz to execute a memory-resident payload.
