https://pwn.watch/i/apache-ofbiz-cve-2024-38856 Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context of the OFBiz user process by an unauthenticated attacker. Added to the CISA KEV catalog on 2024-08-27. en Tue, 27 Aug 2024 00:00:00 GMT https://pwn.watch/i/apache-ofbiz-cve-2024-38856 https://pwn.watch/i/apache-ofbiz-cve-2024-38856#2024-08-27-d6e193b2 Tue, 27 Aug 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/apache-ofbiz-cve-2024-38856 https://pwn.watch/i/apache-ofbiz-cve-2024-38856#2024-08-05-efa1c7f0 Mon, 05 Aug 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-38856">Source</a></p>