CISA warns of active attacks on Apache OFBiz flaw CVE-2024-38856
Take action: As expected, attacks have started. If you are using Apache OfBiz, lock down access from the internet, and patch ASAP. Even regulators now insist on patching.
Learn More
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to federal agencies and enterprises about active exploitation of a known vulnerability in the Apache OFBiz ERP suite.
The vulnerability, tracked as CVE-2024-38856, affects all versions of Apache OFBiz up to version 18.12.14. Exploiting this flaw allows attackers to execute screen rendering code on affected endpoints without requiring authentication.
The Apache Software Foundation released a patch addressing the vulnerability on August 5, 2024. The fixed version is Apache OFBiz 18.12.15, which includes protections against this specific exploit.
CISA issued an advisory, adding CVE-2024-38856 to its Known Exploited Vulnerabilities catalog. This designation means that there is ongoing exploitation of this flaw in the wild and the critical need for organizations to update their systems promptly. CISA has not specified the groups responsible for exploiting the vulnerability.
CISA advises all organizations using Apache OFBiz to upgrade to version 18.12.15 or later to mitigate the risk associated with CVE-2024-38856.
