Vulnerabilitycritical

Apache fixed a new remote code execution flaw in Apache OFBiz

Security Affairsby @securityaffairsSep 6, 2024 · 08:13 UTC (Sep 6, 2024)1 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-45195 CVE-2024-32113 CVE-2024-36104 CVE-2024-38856

Tags: cve-2024-45195 cve-2024-32113 cve-2024-36104 cve-2024-38856 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-32113	Critical Unauthenticated Path Traversal in Apache OFBiz	9.8	100%	KEV	May 8, 2024 KEV Aug 7, 2024
CVE-2024-36104	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz	9.1	88%		Jun 4, 2024
CVE-2024-38856	Pre-auth RCE via Incorrect Authorization in Apache OFBiz	9.8	99%	KEV	Aug 5, 2024 KEV Aug 27, 2024
CVE-2024-45195	Forced Browsing (Improper Authorization) in Apache OFBiz	7.5	100%	KEV	Sep 4, 2024 KEV Feb 4, 2025

From the original article

1 min read at securityaffairs.com

Apache addressed a remote code execution vulnerability affecting the Apache OFBiz open-source enterprise resource planning (ERP) system. Apache fixed a high-severity vulnerability, tracked as CVE-2024-45195 (CVSS score: 7. 5) affecting the Apache OFBiz open-source enterprise resource planning (ERP) system.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.