CVE-2023-49070 (published 2023-12-05T08:05:06.966Z)

Pre-auth RCE in Apache Ofbiz 18.12.09.

It's due to XML-RPC no longer maintained still present.
This issue affects Apache OFBiz: before 18.12.10. 
Users are recommended to upgrade to version 18.12.10


Affected products: Vendor: Apache Software Foundation
Product: Apache OFBiz
Versions: 0