Apache OFBiz Authentication Bypass Vulnerability (CVE-2023-49070 and CVE-2023-51467)

CVEs

CVE-2023-49070

N/A Severity

Apps

Screenshots from the blog posts

PoC video

Summary

This article explores CVE-2023-51467, a zero-day SSRF vulnerability in Apache OFBiz, arising from an incomplete patch for CVE-2023-49070, a pre-authenticated RCE flaw.

Screenshots from the blog posts

PoC video

Summary

Description