Apache OFBiz: Arbitrary file reading vulnerability

Vulnerability

An arbitrary file reading vulnerability exists in Apache OFBiz when the Solr plugin is enabled. The issue affects all versions before 18.12.07. The vulnerability allows an unauthenticated attacker to read arbitrary files from the server's filesystem by sending crafted requests to the Solr plugin endpoint.

Exploitation

No authentication is required. An attacker with network access to the OFBiz instance can exploit this by sending a specially crafted HTTP request to the Solr plugin's URL. The exact request structure is not publicly detailed, but the attack is pre-authentication and does not require any prior access or user interaction.

Impact

Successful exploitation allows an attacker to read arbitrary files on the server, potentially including sensitive configuration files, credentials, or other confidential data. The confidentiality of the system is compromised, but integrity and availability are not directly affected.

Mitigation

Upgrade to Apache OFBiz version 18.12.07 or later, which contains the fix. No workarounds are documented. The fix was released on an undisclosed date prior to the CVE publication on 2023-04-14.