原创 Paper | Apache OFBiz SSRF to RCE(CVE-2024-45507) 漏洞分析 | CTF导航
Tags
attack-pattern: Model Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID 25756d47-d71b-403f-8658-948adeb1c108
Fingerprint 1d2d0698ef147d58
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 9, 2024, midnight
Added to db Sept. 12, 2024, 4 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline 原创 Paper | Apache OFBiz SSRF to RCE(CVE-2024-45507) 漏洞分析
Title 原创 Paper | Apache OFBiz SSRF to RCE(CVE-2024-45507) 漏洞分析 | CTF导航
Detected Hints/Tags/Attributes 7/1/19
Source URLs
Redirection Url
Details Source https://www.ctfiot.com/204845.html
URL Provider
Details Provider Source level domain
Details ctfiot.com www.ctfiot.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 426 ✔ CTF导航 https://www.ctfiot.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 19 
cve-2024-45507
Details CVE 45 
cve-2024-45195
Details Domain 4128 
github.com
Details Domain 1 
viewmap.info
Details Domain 1 
screenfactory.java
Details File 4 
12.tar
Details File 1 
通过viewname的值在controller.xml
Details File 1 
tempexprscreens.xml
Details File 1 
viewmap.inf
Details File 1 
screenfactory.java
Details File 3 
xx.xml
Details File 1 
statsscreens.xml
Details File 1 
commonscreens.xml
Details Github username 40 
apache
Details sha1 1 
9fe40f8cba8399afdfa41e8c9fd0ec61a569f2b5
Details Url 1 
https://github.com/apache/ofbiz-framework/archive/refs/tags/release18.12.12.tar.gz
Details Url 1 
http://yourip/xx.xml
Details Url 1 
https://github.com/apache/ofbiz-framework/commit/28f5f87ec9
Details Url 1 
https://github.com/apache/ofbiz-framework/commit/9fe40f8cba8399afdfa41e8c9fd0ec61a569f2b5