Critical severity9.8NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026

CVE-2024-45507

Description

Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.16.

Users are recommended to upgrade to version 18.12.16, which fixes the issue.

LLM-synthesized narrative grounded in this CVE's description and references.

Apache/Ofbiz3 versions
cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*range: <18.12.16
- (no CPE)range: <18.12.16
- (no CPE)range: 0

No linked articles in our index yet.