Lucene search
+L

1 matches found

Rapid7 Blog
Rapid7 Blog
added 2024/09/05 2:54 p.m.11 views

CVE-2024-45195: Apache OFBiz Unauthenticated Remote Code Execution (Fixed)

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server. Exploitation is facilitated by bypassing...

9.8CVSS10AI score0.99983EPSS
SaveExploits16
Rows per page
Query Builder