Public signup for this instance is disabled. Go to our Self serve sign up page to request an account. Report potential security issues privately

  1. Bug OFBIZ-12437
    Resolve local xsd on UtilXml class
  2. Bug OFBIZ-12436
    gradlew is unable to start OfBiz
  3. Bug OFBIZ-12368
    In LookupProduct some categories don't show, only blank lines
  4. Sub-task OFBIZ-12337
    [SECURITY] CVE-2021-42340 Apache Tomcat DoS
  5. Sub-task OFBIZ-12332
    post-auth Remote Code Execution Vulnerability
  6. Improvement OFBIZ-12324
    Create a deny list to reject webshell tokens
  7. Sub-task OFBIZ-12316
    The Solr version included in OFBiz has an SSRF vulnerability (CVE-2021-27905)
  8. Sub-task OFBIZ-12307
    CVE-2021-37608 vulnerability bypass
  9. Sub-task OFBIZ-12306
    Found a new XXE (XML External Entity Injection) vulnerability in ArtifactInfo
  10. Bug OFBIZ-12305
    Groovy Program sandbox bypass
  11. Sub-task OFBIZ-12304
    Found a new XXE (XML External Entity Injection) vulnerability in EntityImport
  12. Sub-task OFBIZ-12301
    SecuredUpload::isValidTextFile wrong check with uppercase
  13. Sub-task OFBIZ-12297
    Wrong uploaded file checked in Image Management [CVE-2021-37608]
  14. Bug OFBIZ-12290
    GL Reconciliation unable to be edited
  15. Bug OFBIZ-12289
    bug on button from catalog to party associated
  16. Bug OFBIZ-12287
    UserLoginHistory failed the store operation with large password
  17. Bug OFBIZ-12286
    Changes in dtds or parsers coused ofbiz build to crash
  18. Bug OFBIZ-12281
    Static initialization vectors for encryption
  19. Bug OFBIZ-12280
    Upgrade Tomcat from 9.0.43 to 9.0.48 (due to CVEs-2021-30037/30639/30640)
  20. Bug OFBIZ-12273
    IndexOutOfBoundsException on Entity Import
  21. Improvement OFBIZ-12271
    Add TASK_STATUS to `status' field options in EditCalEvent form
  22. Bug OFBIZ-12259
    SeoConfigUtil does not maintaince char-replace-order
  23. Sub-task OFBIZ-12256
    Update PDFBox to 2.0.24 because of CVE-2021-31811 & CVE-2021-31812
  24. Bug OFBIZ-12254
    XSS vulnerability for ListWorkEfforts form
  25. Bug OFBIZ-12253
    Show WorkEffort names in FindWorkEffort page
  26. Bug OFBIZ-12250
    Failed to update work effort child
  27. Bug OFBIZ-12249
    Unexpected decoding of url encoded textarea data after submission
  28. Improvement OFBIZ-12242
    Missing service for updateFacilityLocationGeoPoint
  29. Bug OFBIZ-12233
    Plugin not showing in menu due to permission
  30. Bug OFBIZ-12229
    Error page shown when clicking on a product Id in the purchase order page
  31. Bug OFBIZ-12198
    EditFinAccountReconciliations does not work
  32. Improvement OFBIZ-12196
    Update Freemaker to 2.3.31 in R17 and R18
  33. Task OFBIZ-12192
    Replace Bintray by a new place to upload the Gradle Wrapper
  34. Bug OFBIZ-12177
    Possibly currency display bug in "Find Invoices"
  35. Bug OFBIZ-12140
    Ampersand in Party not displayed correctly
  36. Bug OFBIZ-12108
    Invalid Currency symbol in income statement csv export
  37. Bug OFBIZ-12046
    Edit record in product promotion, "Promotion Last Modified Date" is invalid, but don't notice to user
  38. Improvement OFBIZ-11893
    Error messages when generating HTML and PDF file from AsciiDoc files
  39. Bug OFBIZ-11888
    OFBiz API Reference link does not work for Developers#Documentation and Help
  40. Sub-task OFBIZ-11848
    Upgrade Tomcat from 9.0.34 to 9.0.36 (CVE-2020-11996)
  41. Bug OFBIZ-11504
    Solr Configuration Problem on Demo Instance
  42. Sub-task OFBIZ-11282
    Fix the Buildbot config
  43. Sub-task OFBIZ-11279
    Equivalent of svn:auto-props properties on the server:
  44. Improvement OFBIZ-10795
    Product dropdown should be replaced with product lookup on Edit Price Rule screen
  45. Bug OFBIZ-10675
    createGlReconciliation throws an error
  46. Bug OFBIZ-10654
    Update and fix openstreetmap.org integration
  47. Improvement OFBIZ-10590
    Add http to https redirect rule for ofbiz.apache.org
Refresh results