exploit/multi/http/apache_ofbiz_forgot_password_directory_traversal

weaponized

Apache OFBiz forgotPassword/ProgramExport RCE

view exploit source metasploittype exploitpublished 2024-05-30catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-38856US	critical9.8OT critical	99.4% (100th)	KEV	2024-08-05
Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the is…
CVE-2024-32113US	critical9.8OT critical	99.9% (100th)	KEV	2024-05-08
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommende…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.