Back to the CVE list
CVE-2024-38856 CISA KEV · Actively exploited

Apache OFBiz Incorrect Authorization Vulnerability

CVSS score

—

EPSS probability

%99.4

Risk score

—

Published

2 y ago

OverviewPublic Exploits (11)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
securelayer7/CVE-2024-38856_Scanner
GitHub

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856) (★2)

Public PoCSource updated: 08.08.2024 13:17:09
G
ThatNotEasy/CVE-2024-38856
GitHub

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE (★0)

Public PoCSource updated: 10.08.2024 12:14:45
G
Praison001/CVE-2024-38856-ApacheOfBiz
GitHub

Exploit for CVE-2024-38856 affecting Apache OFBiz versions before 18.12.15 (★0)

Public PoCSource updated: 19.08.2024 00:27:43
G
0x20c/CVE-2024-38856-EXP
GitHub

CVE-2024-38856 Exploit (★0)

Public PoCSource updated: 22.08.2024 13:19:51
G
emanueldosreis/CVE-2024-38856
GitHub

Nuclei template to scan for Apache Ofbiz affecting versions before 18.12.15 (★0)

Public PoCSource updated: 28.08.2024 06:19:31
G
BBD-YZZ/CVE-2024-38856-RCE
GitHub

Apache OFBiz CVE-2024-38856 (★0)

Public PoCSource updated: 28.08.2024 15:25:09
G
XiaomingX/cve-2024-38856-poc
GitHub

CVE-2024-38856 是 Apache OFBiz 中的一个严重漏洞，允许未经身份验证的攻击者在受影响的系统上执行任意代码。 (★0)

Public PoCSource updated: 23.11.2024 12:57:31
G
FakesiteSecurity/CVE-2024-38856_Scen
GitHub

Tentang Pemindai & Eksploitasi Apache OFBiz RCE (CVE-2024-38856) (★0)

Public PoCSource updated: 03.01.2025 00:27:38
G
AlissonFaoli/Apache-OFBiz-Exploit
GitHub

Exploit for Apache OFBiz - CVE-2024-38856 (★0)

Public PoCSource updated: 11.02.2025 13:48:54
G
Hex00-0x4/CVE-2024-38856-Apache-OFBiz
GitHub

CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit (★0)

Public PoCSource updated: 10.10.2025 11:21:42
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38856.yaml
Nuclei

Nuclei: Apache OFBiz - Improper Authorization & Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-38856"