Description
No description available.
Apache OFBiz 身份验证绕过漏洞 可导致远程代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/framework/Apache-OFBiz-%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81%E7%BB%95%E8%BF%87%E5%AF%BC%E8%87%B4%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C-CVE-2024-38856.md
https://cloud.tencent.com/developer/article/2443511
https://www.secrss.com/articles/62301
https://avd.aliyun.com/product?prod=ofbiz
https://zhuanlan.zhihu.com/p/675065187
https://www.anquanke.com/post/id/299899
https://www.secevery.com/toBugInfo?id=1740275755180527617
https://www.cnblogs.com/CVE-Lemon/p/17962663
https://www.leadsec.com.cn/News_detail/110.html
https://xxc.snnu.edu.cn/info/1026/2704.htm
https://www.vicarius.io/vsociety/posts/apache-ofbiz-authentication-bypass-vulnerability-cve-2023-49070-and-cve-2023-51467
https://vulhub.org/environments?tag=Auth%20Bypass
https://www.openwall.com/lists/oss-security/2026/05/19/29
https://www.sentinelone.com/vulnerability-database/cve-2023-51467/
https://www.zscaler.com/blogs/security-research/cve-2024-38856-pre-auth-rce-vulnerability-apache-ofbiz
https://www.rapid7.com/blog/post/2024/09/05/cve-2024-45195-apache-ofbiz-unauthenticated-remote-code-execution-fixed/
https://medium.com/@aadityajain8888/apache-ofbiz-authentication-bypass-vulnerability-42cc4fe896cf
https://docs.indusface.com/en/article/critical-apache-ofbiz-zero-day-authbiz-cve-2023-49070-and-cve-2023-51467
https://nvd.nist.gov/vuln/detail/cve-2023-49070
https://www.invicti.com/web-application-vulnerabilities/apache-ofbiz-rce-cve-2024-32113-cve-2024-36104-cve-2024-38856