Apache OFBiz SSRF (CVE-2023-50968)
Severity:
High
Summary
OFBiz allows an unauthenticated attacker to send arbitrary requests to perform lookups on the internal network which is otherwise not accessible externally. An attacker may use this feature to perform SSRF (server-side request forgery) attacks on the server.
Impact
The impact varies depending on the environment.
Remediation
Upgrade to the latest version of OFBiz
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Related Vulnerabilities
Build your resistance to threats. And save hundreds of hours each month.
