Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 18.12.16.
Users are recommended to upgrade to version 18.12.16, which fixes the issue.
References
| Link | Resource |
|---|---|
| https://ofbiz.apache.org/download.html | Product |
| https://ofbiz.apache.org/security.html | Patch Vendor Advisory |
| https://issues.apache.org/jira/browse/OFBIZ-13132 | Issue Tracking Patch Vendor Advisory |
| https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy | Mailing List |
Configurations
History
05 Sep 2024, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apache
Apache ofbiz |
|
| CPE | cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://ofbiz.apache.org/download.html - Product | |
| References | () https://issues.apache.org/jira/browse/OFBIZ-13132 - Issue Tracking, Patch, Vendor Advisory | |
| References | () https://ofbiz.apache.org/security.html - Patch, Vendor Advisory | |
| References | () https://lists.apache.org/thread/o90dd9lbk1hh3t2557t2y2qvrh92p7wy - Mailing List |
04 Sep 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-04 09:15
Updated : 2024-09-05 17:53
NVD link : CVE-2024-45507
Mitre link : CVE-2024-45507
JSON object : View
Products Affected
apache
- ofbiz