Threats tagged 'ghsa-29j7-h7qg-q9xv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-100228Order Returns · Improper Input Validation High2026-11-05GCVE DatabaseCVE-2026-100228 Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user without the ORDERMGR_CREATE permission to persist an arbitrary price on a return item via the createReturnItem service, bypassing the intended server-computed price ceiling. Users are recommended to upgrade to version 24.09.08, which fixes this issue. Report on CVE-2026-100228 Vulnerability CWE-20 #ghsa-29j7-h7qg-q9xv	GCVE Database	2026-11-05

Page 1 of 1