CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-08-05
Apache OFBiz Unauthenticated Remote Code Execution (RCE) and Authorization Bypass Advisory (CVE-2024-38856)
[Affected Scope] Apache OFBiz versions up to and including 18.12.14
[Impact] Unauthenticated remote attackers can execute arbitrary screen rendering code and system commands by sending specially crafted HTTP requests
[Mitigation] Immediately upgrade Apache OFBiz to the latest stable version 18.12.15 or higher