description: Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host
problem types: CSRF Vulnerability
affected:
{
product: Apache OFBiz
vendor: Apache
versions:
status: affected, version: 17.12.01
}