Description
Apache OFBiz 18.12.16 之前的版本在 Linux 和 Windows 系统上存在未经身份验证的远程代码执行漏洞。
Apache OFBiz StatsSinceStart 远程代码执行漏洞（CVE-2024-45507）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-45507
https://github.com/vulhub/vulhub/blob/master/ofbiz/CVE-2024-45507/README.md
https://cloud.tencent.com/developer/article/2468445
https://cn-sec.com/archives/3179889.html
https://s4e.io/tools/apache-ofbiz-remote-code-execution-cve-2024-45507
https://vulners.com/cve/CVE-2024-45507
https://pentest-tools.com/vulnerabilities-exploits/apache-ofbiz-remote-code-execution_23135
https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/apache-ofbiz-ssrf-cve-2024-45507
https://www.securityweek.com/apache-makes-another-attempt-at-patching-exploited-rce-in-ofbiz/
https://www.bleepingcomputer.com/news/security/apache-fixes-critical-ofbiz-remote-code-execution-vulnerability/