CVE-2023-50968

Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users are recommended to upgrade to version 18.12.11, which fixes this issue.

• CWE-200
• CWE-918
• CWE-918

• http://www.openwall.com/lists/oss-security/2023/12/26/2Mailing List, Third Party Advisory
• https://issues.apache.org/jira/browse/OFBIZ-12875Issue Tracking, Patch, Vendor Advisory
• https://lists.apache.org/thread/x5now4bk3llwf3k58kl96qvtjyxwp43qMailing List, Vendor Advisory
• https://ofbiz.apache.org/download.htmlProduct
• https://ofbiz.apache.org/release-notes-18.12.11.htmlRelease Notes
• https://ofbiz.apache.org/security.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2023/12/26/2Mailing List, Third Party Advisory
• https://issues.apache.org/jira/browse/OFBIZ-12875Issue Tracking, Patch, Vendor Advisory
• https://lists.apache.org/thread/x5now4bk3llwf3k58kl96qvtjyxwp43qMailing List, Vendor Advisory
• https://ofbiz.apache.org/download.htmlProduct
• https://ofbiz.apache.org/release-notes-18.12.11.htmlRelease Notes
• https://ofbiz.apache.org/security.htmlVendor Advisory

Published

Dec 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50962IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HT…7.5
• CVE-2023-50963IBM Storage Defender - Data Protect 1.0.0 through 1.4.1 is v…5.4
• CVE-2023-50964IBM InfoSphere Information Server 11.7 is vulnerable to cros…5.4
• CVE-2023-50965In MicroHttpServer (aka Micro HTTP Server) through 4398570, …9.8
• CVE-2023-50966erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 …5.3
• CVE-2023-50967latchset jose through version 11 allows attackers to cause a…7.5
• CVE-2023-50969Thales Imperva SecureSphere WAF 14.7.0.40 allows remote atta…9.8
• CVE-2023-5097Improper Input Validation vulnerability in HYPR Workforce Ac…5.5
• CVE-2023-50974In Appwrite CLI before 3.0.0, when using the login command, …5.5
• CVE-2023-50975The TD Bank TD Advanced Dashboard client through 3.0.3 for m…8.4
• CVE-2023-50976Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missin…9.8
• CVE-2023-50977Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…