CVE-2023-51467
ID: 6500c22c-7f88-51b9-a5af-6a0edb79a7fe
STIX ID: report--6500c22c-7f88-51b9-a5af-6a0edb79a7fe
Feed Name: Zscaler Security Research Blog
Threat Score
Apache OFBiz received a patch on December 4, 2023 to address CVE-2023-49070 by removing the XMLRPC endpoint and library, but the root cause remained. While validating that fix, SonicWall researchers bypassed authentication in the updated OFBiz release, leading to a separate issue tracked as CVE-2023-51467.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.