CVE-2023-50968 (published 2023-12-26T11:45:55.393Z)
Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations.

The same uri can be operated to realize a SSRF attack also  without  authorizations.

Users are recommended to upgrade to version 18.12.11, which fixes this issue.
Affected products: Vendor: Apache Software Foundation
Product: Apache OFBiz
Versions: 0