Eriks Dobelis

**Name of the Vulnerable Software and Affected Versions** Apache Open For Business Project (OFBiz) (affected versions not specified) **Description** The issue is related to the forum implementation in the ecommerce component, where it trusts certain hidden form fields, such as `dataResourceTypeId` and `contentTypeId`. This trust allows remote attackers to create unauthorized types of content, modify existing content, or potentially have other unknown impacts. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.