← All advisories

Critical severity9.8NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026

CVE-2023-51467

CVE-2023-51467

Description

The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Apache/Ofbiz3 versions
cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*range: <18.12.11
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

8

issues.apache.org/jira/browse/OFBIZ-12873nvdIssue TrackingPatchVendor Advisory
lists.apache.org/thread/9tmf9qyyhgh6m052rhz7lg9vxn390bdvnvdMailing ListVendor Advisory
lists.apache.org/thread/oj2s6objhdq72t6g29omqpcbd1wlp48onvdMailing ListVendor Advisory
ofbiz.apache.org/download.htmlnvdProduct
ofbiz.apache.org/release-notes-18.12.11.htmlnvdRelease Notes
ofbiz.apache.org/security.htmlnvdNot Applicable
www.openwall.com/lists/oss-security/2023/12/26/3nvd
www.vicarius.io/vsociety/posts/apache-ofbiz-authentication-bypass-vulnerability-cve-2023-49070-and-cve-2023-51467nvd

News mentions

0

No linked articles in our index yet.