CVE-2023-51467 PoC — Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability

Source

https://github.com/K3ysTr0K3R/CVE-2023-51467-EXPLOIT

Associated Vulnerability

Title:Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability (CVE-2023-51467)
Description:The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

Readme

# CVE-2023-51467 - Apache OFBiz Authentication Bypass

This flaw enables attackers to bypass authentication, leading to a Server-Side Request Forgery (SSRF) exploit. When sending a web request to the specific path /webtools/control/ping?USERNAME&PASSWORD=test&requirePasswordChange=Y, the server responds with the word "PONG." This response indicates that the vulnerability has been triggered.

# Disclaimer
This PoC/scanner is only meant for educational purposes. You are responsible for your own actions.

File Snapshot


 [4.0K]  /data/pocs/3020017581d5da52351a35d70d53b4039f4b8f67
├── [3.2K]  CVE-2023-51467.py
└── [ 507]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!