CVE-2023-51467 PoC — Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability

Source

https://github.com/K3ysTr0K3R/CVE-2023-51467-EXPLOIT

Associated Vulnerability

Title:Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability (CVE-2023-51467)
Description:The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

Readme

# CVE-2023-51467 - Apache OFBiz Authentication Bypass

This flaw enables attackers to bypass authentication, leading to a Server-Side Request Forgery (SSRF) exploit. When sending a web request to the specific path /webtools/control/ping?USERNAME&PASSWORD=test&requirePasswordChange=Y, the server responds with the word "PONG." This response indicates that the vulnerability has been triggered.

# Disclaimer
This PoC/scanner is only meant for educational purposes. You are responsible for your own actions.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →