CVE-2024-38856 — Vulnerability intelligence

Apache — OFBiz

Published: 2024-08-05T08:20:18.081Z

CVSS

8.1

CISA KEV

Known exploitation

Original source text (not a translation)

Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.

Sources

• Apache OFBiz Incorrect Authorization Vulnerability
• Original advisory
• Original advisory
• CVE-2024-38856