CVE-2019-0235

Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

32.75% chance of exploitation in the next 30 days, 98th percentile

Published

2020-04-30

Updated

2024-08-04

Proof-of-concept exploits (6)

• http://packetstormsecurity.com/files/157514/Apache-OFBiz-17.12.03-Cross-Site-Request-Forg…
• https://lists.apache.org/thread.html/rbd572bb27991835a3455c1bf694e7140d79ab03cdb9e6e50fd1…
• https://lists.apache.org/thread.html/r392206f7cd131f0fc3f7c60a767ced93ced00411d55c1777c21…
• https://lists.apache.org/thread.html/rfe36dc9135810954ef667d29129d02207fb999a286b60d33bd9…
• https://lists.apache.org/thread.html/r9eeb6c41d2c562b451f1e48ec56881f59107cc4dea7c883db2c…
• https://lists.apache.org/thread.html/rb53870d24088956a555683aa1aea7e532e3be65b863b9c75eac…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48408

References

• CVE Record
• NVD entry

Related

• CVE-2019-0232
• CVE-2019-0285
• CVE-2019-0230
• CVE-2019-0307
• CVE-2019-0227
• CVE-2019-0319