Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 18.12.17.
Users are recommended to upgrade to version 18.12.17, which fixes the issue.
References
| Link | Resource |
|---|---|
| https://issues.apache.org/jira/browse/OFBIZ-13158 | Issue Tracking |
| https://lists.apache.org/thread/022r19skfofhv3lzql33vowlrvqndh11 | Mailing List Vendor Advisory |
| https://ofbiz.apache.org/download.html | Product |
| https://ofbiz.apache.org/security.html | Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2024/11/16/3 | Mailing List Third Party Advisory |
Configurations
History
24 Jun 2025, 16:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://issues.apache.org/jira/browse/OFBIZ-13158 - Issue Tracking | |
| References | () https://lists.apache.org/thread/022r19skfofhv3lzql33vowlrvqndh11 - Mailing List, Vendor Advisory | |
| References | () https://ofbiz.apache.org/download.html - Product | |
| References | () https://ofbiz.apache.org/security.html - Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2024/11/16/3 - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:* | |
| First Time |
Apache
Apache ofbiz |
Information
Published : 2024-11-18 09:15
Updated : 2025-06-24 16:20
NVD link : CVE-2024-47208
Mitre link : CVE-2024-47208
CVE.ORG link : CVE-2024-47208
JSON object : View
Products Affected
apache
- ofbiz