THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
But with the article above the buzz began to spread and we could not wait to be able to update Groovy. So a temporary workaround was adopted as explained in
| Jira | ||||||
|---|---|---|---|---|---|---|
|
RMI and other risks
You are were though still at risk if you use RMI, JNIJNDI, JMX or Spring and maybe other Java classes we don't use OOTB in OFBiz. So we We (PMC) decided to comment out RMI OOTB
| Jira | ||||||
|---|---|---|---|---|---|---|
|
We also decided to provide a simple way to protect yourself from all possible Java serialize vulnerabilities.
...