Page History

...

But with the article above the buzz began to spread and we could not wait to be able to update Groovy. So a temporary workaround was adopted as explained in

Jira
server ASF JIRA serverId 5aa69414-a9e9-3523-82ec-879b028fb15b key OFBIZ-6568

. Since then OFBIZ-6568 has been fixed and the temporary workaround for Groovy is now unnecessary.

RMI and other risks

You were would though still at risk if you used use RMI, JNDI, JMX or Spring and maybe other Java classes we don't OFBiz does not use Out Of The Box (OOTB) in OFBiz. So the PMC decided to comment out RMI OOTB 

Jira
server ASF JIRA serverId 5aa69414-a9e9-3523-82ec-879b028fb15b key OFBIZ-6942

. But we could do nothing to prevent the other possiblities (not concerned OOTB). Note also that in the last release of the R12.04 branch (12.04.06) RMI is not deactivated so you should use the recommended remediation below.

...