Description
Apache OFBiz是一个电子商务平台，用于构建大中型企业级、跨平台、跨数据库、跨应用服务器的多层、分布式电子商务类应用系统。Apache OFBiz在处理view视图渲染的时候存在逻辑缺陷，攻击者可通过构造特殊URL来覆盖最终的渲染视图，从而执行任意代码。
Apache OFbiz /ProgramExport 命令执行漏洞（CVE-2024-38856）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/gobysec/GobyVuls/blob/master/Apache%20OFbiz%20%20ProgramExport%20Command%20Execution%20Vulnerability(CVE-2024-38856).md
https://zhuanlan.zhihu.com/p/31572984484
https://www.cnblogs.com/gobybot/p/18345811
https://www.secrss.com/articles/68838
https://cloud.tencent.com/developer/article/2443511
https://blog.csdn.net/m0_46699477/article/details/140960772
https://rivers.chaitin.cn/blog/cqqqd7p0lnec5jjuglo0
https://nvd.nist.gov/vuln/detail/cve-2024-38856
https://issues.apache.org/jira/browse/OFBIZ-13128