← All credits
Krishna Uprit
23 vulnerability records and advisories credit this contributor.
CVE-2026-81816
Apache OFBiz: XML external entity injection (XXE)
CVE-2026-83542
Apache OFBiz: Unauthenticated RCE via login-page widget injection
CVE-2026-85627
Apache OFBiz: Authenticated Code Execution Vulnerability
CVE-2026-82907
Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound
CVE-2026-82910
Apache OFBiz: renderLink compiles link parameters as FreeMarker source
CVE-2026-82912
Apache OFBiz: Unsandboxed Groovy compiled from a service parameter
CVE-2026-82960
Apache OFBiz: Widget use-when Expression Injection Bypasses Groovy Sandbox for authenticated RCE
CVE-2026-84183
Apache OFBiz: Content Manager VIEW-only RCE in updateLayout
CVE-2026-84728
Apache OFBiz: Cross-tenant authorization bypass in mapped-domain login
CVE-2026-82916
Apache OFBiz: webtools xmldsdump exports any entity to any path