critical9.8
CVE-2023-51467
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code
Impact
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Ofbiz | before 18.12.11 |
Weakness classification
References
- NVD record
- CVE.org record
- https://issues.apache.org/jira/browse/OFBIZ-12873
- https://lists.apache.org/thread/9tmf9qyyhgh6m052rhz7lg9vxn390bdv
- https://lists.apache.org/thread/oj2s6objhdq72t6g29omqpcbd1wlp48o
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/release-notes-18.12.11.html
- https://ofbiz.apache.org/security.html
- https://www.openwall.com/lists/oss-security/2023/12/26/3
- https://issues.apache.org/jira/browse/OFBIZ-12873
- https://lists.apache.org/thread/9tmf9qyyhgh6m052rhz7lg9vxn390bdv
- https://lists.apache.org/thread/oj2s6objhdq72t6g29omqpcbd1wlp48o
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/release-notes-18.12.11.html
- https://ofbiz.apache.org/security.html
- https://www.openwall.com/lists/oss-security/2023/12/26/3
- https://www.vicarius.io/vsociety/posts/apache-ofbiz-authentication-bypass-vulnerability-cve-2023-49070-and-cve-2023-51467