Non notée
CVE-2024-45507 Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache…
Description
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OFBiz 18.12 | premières → < 18.12.16 | 18.12.16 |
| apache_ofbiz 18.12 | premières → < 18.12.16 | 18.12.16 |
Références
- ofbiz.apache.org ofbiz.apache.org
- ofbiz.apache.org ofbiz.apache.org
- issues.apache.org issues.apache.org
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OFBiz
Les 97 CVE de Apache OFBiz →
CVE-2026-66903
Apache OFBiz: Authenticated Path Traversal in Catalog Image Management
Non notée
CVE-2026-71901
Apache OFBiz: Dispatch arbitrary internal services on SFA component
Non notée
CVE-2026-68524
Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading
Non notée
CVE-2026-73577
Apache OFBiz: Unauthenticated path-suffix view authorization bypass
Non notée