01-13-2024, 04:18 AM
Apache OFBiz is an open source enterprise resource system that is used in a wide range of software, including Atlassian Jira, which is used by more than 120,000 companies. The authentication bypass vulnerability, listed as CVE-2023-51467, has a CVSS score of 9.8 and could expose sensitive data or allow an unauthenticated attacker to execute arbitrary code. The critical vulnerability in Apache OFBiz was hit with a surge in exploitation attempts in recent weeks.
This is the discoverer's blog, and many technical details are disclosed: https://blog.sonicwall.com/en-us/2023/12...y-authbiz/ .
This is two wonderful POCs:
https://github.com/abdoghazy2015/ofbiz-C...70-RCE-POC
https://github.com/jakabakos/Apache-OFBi...ion-Bypass
I used abdoghazy2015 's POC and got the user flag of the HTB "Drive" machine
This is the latest article about weaponizing, which is wonderful. They developed and open-sourced a memory-resident payload for Apache OFBiz’s CVE-2023-51467:
https://vulncheck.com/blog/ofbiz-cve-2023-51467
This is the discoverer's blog, and many technical details are disclosed: https://blog.sonicwall.com/en-us/2023/12...y-authbiz/ .
This is two wonderful POCs:
https://github.com/abdoghazy2015/ofbiz-C...70-RCE-POC
https://github.com/jakabakos/Apache-OFBi...ion-Bypass
I used abdoghazy2015 's POC and got the user flag of the HTB "Drive" machine
This is the latest article about weaponizing, which is wonderful. They developed and open-sourced a memory-resident payload for Apache OFBiz’s CVE-2023-51467:
https://vulncheck.com/blog/ofbiz-cve-2023-51467