Free Trial

CVE-2023-49070 : APACHE OFBIZ UP TO 18.12.9 CODE INJECTION

Description

Pre-auth RCE in Apache Ofbiz 18.12.09. It’s due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are recommended to upgrade to version 18.12.10.

References

https://ofbiz.apache.org/download.html

https://ofbiz.apache.org/security.html

https://ofbiz.apache.org/release-notes-18.12.10.html

https://issues.apache.org/jira/browse/OFBIZ-12812

https://lists.apache.org/thread/jmbqk2lp4t4483whzndp5xqlq4f3otg3

For More Information

CVERecord

Common Vulnerabilityies and Exposures

CVE-2023-49070 : APACHE OFBIZ UP TO 18.12.9 CODE INJECTION
CVE-2023-49070 : APACHE OFBIZ UP TO 18.12.9 CODE INJECTION

Contact us to get started

CVE-2024-32638 : APACHE APISIX 3.8.0/3.9.0 FORWARD-AUTH PLUGIN REQUEST SMUGGLING

CVE-2024-32638 : APACHE APISIX 3.8.0/3.9.0 FORWARD-AUTH PLUGIN REQUEST SMUGGLING

Description Inconsistent Interpretation of HTTP Requests (‘HTTP Request Smuggling’) vulnerability in Apache APISIX when using `forward-auth` plugin. This issue affects

Learn more
CVE-2024-22144 : ELI SCHEETZ ANTI-MALWARE SECURITY AND BRUTE-FORCE FIREWALL PLUGIN CODE INJECTION

CVE-2024-22144 : ELI SCHEETZ ANTI-MALWARE SECURITY AND BRUTE-FORCE FIREWALL PLUGIN CODE INJECTION

Description Improper Control of Generation of Code (‘Code Injection’) vulnerability in Eli Scheetz Anti-Malware Security and Brute-Force Firewall gotmls allows

Learn more
CVE-2024-26922 : LINUX KERNEL UP TO 6.9-RC4 AMDGPU PRIVILEGE ESCALATION

CVE-2024-26922 : LINUX KERNEL UP TO 6.9-RC4 AMDGPU PRIVILEGE ESCALATION

Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more

Learn more