Lucene search
HistorySep 04, 2024 - 9:15 a.m.
CVE-2024-45507
server-side request forgery apache ofbiz upgrade vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.555
Percentile
97.7%
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code (‘Code Injection’) vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 18.12.16.
Users are recommended to upgrade to version 18.12.16, which fixes the issue.
Affected configurations
Node
apacheofbizRange<18.12.16
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-45507
2024-09-04 09:15:04
nessus
nessus
Apache OFBiz < 18.12.16 Multiple Vulnerabilities
2024-09-13 00:00:00
thn
thn
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.555
Percentile
97.7%
Related for NVD:CVE-2024-45507