Hi,
I have created this WIP wiki page to share my knowledge about OFBiz security and especially to warn users about the current Java unserialize
vulnerability. Be sure to read at least the "Be safe" warning.
https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secureHTH
Jacques