CVE-2023-51467 Information

Description

The vulnerability allows attackers to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF)

Reference

https://ofbiz.apache.org/download.html https://ofbiz.apache.org/security.html https://ofbiz.apache.org/release-notes-18.12.11.html https://issues.apache.org/jira/browse/OFBIZ-12873 https://lists.apache.org/thread/9tmf9qyyhgh6m052rhz7lg9vxn390bdv https://lists.apache.org/thread/oj2s6objhdq72t6g29omqpcbd1wlp48o http://www.openwall.com/lists/oss-security/2023/12/26/3