CVE-2021-26295 PoC — RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

Title: RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI (CVE-2021-26295)
Description:Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.

CVE-2021-26295 Apache OFBiz rmi反序列化POC

# CVE-2021-26295-Apache-OFBiz
CVE-2021-26295 Apache OFBiz rmi反序列化POC

需要将ysoserial.jar放置在目录下，且不能使用java的高版本

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.