Vulnerability identifier: #VU83884

Vulnerability risk: High

CVSSv3.1: 7.3 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2023-49070

CWE-ID: CWE-676

Exploitation vector: Network

Exploits in database: 3

• January 18, 2024
  • Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 (This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the user.) [Github]
• January 9, 2024
  • Exploit-CVE-2023-49070-and-CVE-2023-51467-Apache-OFBiz (Authentication Bypass Vulnerability Apache OFBiz < 18.12.10.) [Github]
• December 19, 2023
  • CVE-2023-49070 (Exploit Of Pre-auth RCE in Apache Ofbiz!!) [Github]

Impact: Code execution

Vulnerable software:
OFBiz
Other software / Other software solutions

Vendor: Apache Foundation