CVE-2023-50968

Published: 2023-12-26T12:15Z

Last Modified: 2024-11-21T08:37Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users are recommended to upgrade to version 18.12.11, which fixes this issue. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt