Critical severity9.8NVD Advisory· Published Nov 18, 2024· Updated Jun 17, 2026
CVE-2024-47208
CVE-2024-47208
Description
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 18.12.17.
Users are recommended to upgrade to version 18.12.17, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2024/11/16/3nvdMailing ListThird Party Advisory
- lists.apache.org/thread/022r19skfofhv3lzql33vowlrvqndh11nvdMailing ListVendor Advisory
- ofbiz.apache.org/security.htmlnvdVendor Advisory
- issues.apache.org/jira/browse/OFBIZ-13158nvdIssue Tracking
- ofbiz.apache.org/download.htmlnvdProduct
News mentions
0No linked articles in our index yet.