4
Apache fixes critical OFBiz remote code execution vulnerability (www.bleepingcomputer.com)
submitted 1 month ago by IllNess@infosec.pub to c/securitynews@infosec.pub
0 comments fedilink hide all child comments

Tracked as CVE-2024-45195 and discovered by Rapid7 security researchers, this remote code execution flaw is caused by a forced browsing weakness that exposes restricted paths to unauthenticated direct request attacks.

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here
this post was submitted on 06 Sep 2024
4 points (100.0% liked)

Security News

2279 readers
1 users here now

founded 2 years ago
MODERATORS
jerry@infosec.pub