Apache OFBiz is the United States Apache (Apache) Foundation of a set of enterprise resource planning (ERP) system. The system provides a set of Java-based Web application components and tools. Apache OFBiz suffers from a path traversal vulnerability that stems from the application failing to properly filter special elements in the path of a resource or file. An attacker could exploit the vulnerability to cause arbitrary file reads.
🗓️ 31 Aug 2023 00:00:00Reported by China National Vulnerability DatabaseType
cnvd🔗 www.cnvd.org.cn👁 97 Views
| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
| CVE-2023-4611 | 29 Aug 202322:15 | – | attackerkb | |
| The vulnerability of the do_mbind() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information. | 4 Sep 202300:00 | – | bdu_fstec | |
| CVE-2023-4611 affecting package kernel for versions less than 5.15.135.1-2 | 8 Nov 202302:07 | – | cbl_mariner | |
| CVE-2023-4611 | 30 Aug 202302:17 | – | circl | |
| Linux kernel 资源管理错误漏洞 | 29 Aug 202300:00 | – | cnnvd | |
| CVE-2023-4611 | 29 Aug 202321:25 | – | cve | |
| CVE-2023-4611 Use after free race between mbind() and vma-locked page fault | 29 Aug 202321:25 | – | cvelist | |
| CVE-2023-4611 | 29 Aug 202321:25 | – | debiancve | |
| EUVD-2023-54464 | 3 Oct 202520:07 | – | euvd | |
| Siemens SINEC NMS | 13 Aug 202400:00 | – | ics |
10
Node
| Source | Link |
|---|---|
| nvd | www.nvd.nist.gov/vuln/detail/CVE-2023-4611 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
26 Sep 2023 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.16.3 - 7
EPSS0.00255
SSVC