OFBiz has an authentication bypass vulnerability. An attacker can bypass the authentication with a specially crafted HTTP request and get full access to the system.
An unauthenticated attacker can compromise OFBiz
Upgrade to the latest version of OFBiz

You can search and find all vulnerabilities
