CVE-2024-38856 — 脆弱性インテリジェンス

Apache — OFBiz

公表日: 2024-08-05T08:20:18.081Z

CVSS

8.1

CISA KEV

既知の悪用を確認

情報源の原文（翻訳ではありません）

Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.

情報源

• Apache OFBiz Incorrect Authorization Vulnerability
• Original advisory
• Original advisory
• CVE-2024-38856