Description
Apache OFBiz存在未授权代码执行漏洞，该漏洞是由于ProgramExport接口对用户的权限校验不当导致的。
Apache OFBiz CVE-2024-38856 未授权代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2024-38856
https://ofbiz.apache.org/security.html
https://www.zscaler.com/blogs/security-research/cve-2024-38856-pre-auth-rce-vulnerability-apache-ofbiz
https://github.com/AlissonFaoli/Apache-OFBiz-Exploit
https://www.secrss.com/articles/68838
https://avd.aliyun.com/product?prod=ofbiz
https://www.huaweicloud.com/notice/2024/20240806170542741.html
https://www.anquanke.com/post/id/298812
https://www.cyfirma.com/research/cve-2024-38856-pre-authentication-remote-code-execution-rce-vulnerability-analysis-and-exploitation/
https://blog.securelayer7.net/cve-2024-38856-apache-ofbiz-rce/
https://www.cve.org/CVERecord?id=CVE-2024-38856