CVE-2023-50968

Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users are recommended to upgrade to version 18.12.11, which fixes this issue.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2023/12/26/2	Mailing List Third Party Advisory
https://issues.apache.org/jira/browse/OFBIZ-12875	Issue Tracking Patch Vendor Advisory
https://lists.apache.org/thread/x5now4bk3llwf3k58kl96qvtjyxwp43q	Mailing List Vendor Advisory
https://ofbiz.apache.org/download.html	Product
https://ofbiz.apache.org/release-notes-18.12.11.html	Release Notes
https://ofbiz.apache.org/security.html	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-12-26 12:15

Updated : 2024-01-04 03:01

NVD link : CVE-2023-50968

Mitre link : CVE-2023-50968

CVE.ORG link : CVE-2023-50968

JSON object : View

Products Affected

apache

ofbiz

CWE

CWE-918

Server-Side Request Forgery (SSRF)

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2023-50968", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-12-26T12:15:07.287", "references": [{"url": "http://www.openwall.com/lists/oss-security/2023/12/26/2", "tags": ["Mailing List", "Third Party Advisory"], "source": "security@apache.org"}, {"url": "https://issues.apache.org/jira/browse/OFBIZ-12875", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "https://lists.apache.org/thread/x5now4bk3llwf3k58kl96qvtjyxwp43q", "tags": ["Mailing List", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "https://ofbiz.apache.org/download.html", "tags": ["Product"], "source": "security@apache.org"}, {"url": "https://ofbiz.apache.org/release-notes-18.12.11.html", "tags": ["Release Notes"], "source": "security@apache.org"}, {"url": "https://ofbiz.apache.org/security.html", "tags": ["Vendor Advisory"], "source": "security@apache.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}, {"type": "Secondary", "source": "security@apache.org", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations.\n\nThe same uri can be operated to realize a SSRF attack also without authorizations.\n\nUsers are recommended to upgrade to version 18.12.11, which fixes this issue."}, {"lang": "es", "value": "Vulnerabilidad de lectura de propiedades de archivos arbitrarias en Apache Software Foundation Apache OFBiz cuando el usuario realiza una llamada uri sin autorizaci\u00f3n. El mismo uri puede utilizarse para realizar un ataque SSRF tambi\u00e9n sin autorizaci\u00f3n. Se recomienda a los usuarios actualizar a la versi\u00f3n 18.12.11, que soluciona este problema."}], "lastModified": "2024-01-04T03:01:53.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6050132-AADE-4AC9-9C96-C8333441D0EB", "versionEndExcluding": "18.12.11"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}