CVE-2023-51467

—

CVSS 3.1

9.8 critical

EPSS

96%p100

Published

Dec 26, 2023 (Dec 26, 2023)

Modified

Jun 17, 2026

Description

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

Vendors: apache
Products: ofbiz
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.0%)

In the news6 stories

New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution

The Hacker NewsAug 9, 05:12 UTC · Aug 9, 2024Exploit / PoC in the wildCVE-2024-38856 CVE-2024-36104 CVE-2024-32113+1 CVEs

60

Researchers warn of a new critical Apache OFBiz flaw

Security AffairsAug 5, 16:42 UTC · Aug 5, 2024Exploit / PoC in the wildCVE-2024-38856 CVE-2024-32113 CVE-2023-51467

60

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2024Exploit / PoC in the wildCVE-2023-51467 CVE-2023-49070 CVE-2020-9496+2 CVEs

60

Experts created a PoC for Apache OFBiz flaw CVE-2023

Security AffairsJan 12, 12:07 UTC · Jan 12, 2024Exploit / PoC CVE-2023-51467 CVE-2023-49070 CVE-2020-9496+1 CVEs

60

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

The Hacker NewsJan 9, 06:04 UTC · Jan 9, 2024Exploit / PoC in the wildCVE-2023-51467 CVE-2023-49070

60

Experts warn of critical Zero

Security AffairsDec 28, 08:52 UTC · Dec 28, 2023Exploit / PoC CVE-2023-51467 CVE-2023-49070

60