Description
Apache OFBiz 是一个开源的企业资源计划 (ERP) 系统，提供了多种业务管理功能。Apache OFBiz 的 /webtools/control/forgotPassword;/ProgramExport 接口存在路径遍历漏洞，可能导致远程代码执行。该漏洞影响 Apache OFBiz 18.12.13 之前的版本，攻击者可以通过该漏洞执行恶意代码，危害系统安全。
Apache OFBiz /webtools/control/forgotPassword;/ProgramExport 代码执行漏洞 （CVE-2024-32113）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-32113
https://issues.apache.org/jira/browse/OFBIZ-13006
https://rivers.chaitin.cn/blog/cq956n10lnechd244tdg
https://www.rapid7.com/blog/post/2024/09/05/cve-2024-45195-apache-ofbiz-unauthenticated-remote-code-execution-fixed/
https://github.com/Mr-xn/CVE-2024-32113
https://www.cnblogs.com/swordpoems/p/19239133
https://cn-sec.com/archives/3043258.html
https://www.exploit-db.com/exploits/52020
https://www.sonicwall.com/blog/sonicwall-discovers-second-critical-apache-ofbiz-zero-day-vulnerability