WID-SEC-W-2024-2043

DeutschShown in its original language — a full translation is planned for a future version.

Apache OFBiz: Mehrere Schwachstellen

view advisory published 2024-09-03

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache OFBiz ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder vertrauliche Informationen offenzulegen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-45507US	critical9.8	93.2% (100th)	Exploit	2024-09-04
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Use…
CVE-2024-45195US	high7.5OT critical	100.0% (100th)	KEV	2024-09-04
Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fi…

references

External citations — patches, advisories, analysis.

OSS Security Mailing List vom 2024-09-03external
OSS Security Mailing List vom 2024-09-03external
WID-SEC-W-2024-2043 - CSAF Versionself
WID-SEC-2024-2043 - Portal Versionself
Imperva Blog vom 2024-09-12external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan