Sploitus

CVE-2023-49070

17 known exploits for CVE-2023-49070

Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10.  Users are recommended to upgrade to version 18.12.10

Affected products
Apache Ofbiz
Apache Ofbiz
< 18.12.10
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
95.4% (100th percentile)
Weakness
CWE-94
NVD status
Modified
Published
2023-12-05
CVE-2023-49070 at NVD
Authoritative description, scoring and affected products

17 known exploits for CVE-2023-49070

Proof-of-concept code and exploit modules indexed by Sploitus

ofbiz-CVE-2023-49070-RCE-POC
2026-08-30 KitPloitKITPLOIT
Apache-OFBiz-Authentication-Bypass
2026-08-29 KitPloitKITPLOIT
Exploit-CVE-2023-49070-and-CVE-2023-51467-Apache-OFBiz
2026-08-29 KitPloitKITPLOIT
Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467
2026-08-28 KitPloitKITPLOIT
OFBiz-Attack
2026-08-28 KitPloitKITPLOIT
CVE-2023-49070_CVE-2023-51467
2026-08-26 KitPloitKITPLOIT
CVE-2023-49070
2026-08-26 KitPloitKITPLOIT
Exploit for Code Injection in Apache Ofbiz
2024-01-17 Praison001GITHUB
Exploit for Server-Side Request Forgery in Apache Ofbiz
2024-01-13 Jake123otte1GITHUB
Exploit for Server-Side Request Forgery in Apache Ofbiz
2024-01-13 Jake123otte1GITHUB
Exploit for Code Injection in Apache Ofbiz
2024-01-08 UserConnectingGITHUB
Exploit for Code Injection in Apache Ofbiz
2024-01-02 jakabakosGITHUB
Apache OFBiz 18.12.09 Remote Code Execution
2023-12-29 Jacques LerouxPACKETSTORM
Exploit for Server-Side Request Forgery in Apache Ofbiz
2023-12-29 ChocapikkGITHUB
Apache OFBiz 18.12.09 Remote Code Execution Exploit
2023-12-29 Jacques LerouxZDT
Exploit for Code Injection in Apache Ofbiz
2023-12-17 0xrobiulGITHUB
Exploit for Code Injection in Apache Ofbiz
2023-12-14 abdoghazy2015GITHUB