CVE-2024-38856

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2024-08-27

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-38856

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.

Players implicated

apache · vendor OFBiz · product

Description

Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.