Skip to content
OpenAdvisories

Archive

4 September 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-45507 Public exploit Scanner template EPSS 96%

    Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

    Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.