The bug is an arbitrary code execution flaw, allowing threat actors to run any code on either Windows, or Linux servers.
Go Here to Read this Fast! Critical remote code execution flaw in Apache OFBiz patched
Originally appeared here:
Critical remote code execution flaw in Apache OFBiz patched