{"api_version":"1","generated_at":"2026-07-23T11:22:46+00:00","cve":"CVE-2023-49070","urls":{"html":"https://cve.report/CVE-2023-49070","api":"https://cve.report/api/cve/CVE-2023-49070.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-49070","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-49070"},"summary":{"title":"CVE-2023-49070","description":"Description unavailable.","state":"PUBLISHED","assigner":"","published_at":"2023-12-05 08:15:00","updated_at":"2023-12-05 13:51:00"},"problem_types":["CWE-94"],"metrics":[],"references":[{"url":"https://ofbiz.apache.org/security.html","name":"https://ofbiz.apache.org/security.html","refsource":"","tags":[],"title":"","mime":"","httpstatus":"200","archivestatus":"200"},{"url":"https://lists.apache.org/thread/jmbqk2lp4t4483whzndp5xqlq4f3otg3","name":"https://lists.apache.org/thread/jmbqk2lp4t4483whzndp5xqlq4f3otg3","refsource":"","tags":[],"title":"","mime":"","httpstatus":"200","archivestatus":"404"},{"url":"https://issues.apache.org/jira/browse/OFBIZ-12812","name":"https://issues.apache.org/jira/browse/OFBIZ-12812","refsource":"","tags":[],"title":"","mime":"","httpstatus":"200","archivestatus":"404"},{"url":"https://ofbiz.apache.org/release-notes-18.12.10.html","name":"https://ofbiz.apache.org/release-notes-18.12.10.html","refsource":"","tags":[],"title":"","mime":"","httpstatus":"200","archivestatus":"404"},{"url":"https://ofbiz.apache.org/download.html","name":"https://ofbiz.apache.org/download.html","refsource":"","tags":[],"title":"","mime":"","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49070","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49070","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2023-49070","qid":"150758","title":"Apache OFBiz: Pre-Auth Remote Code Execution Vulnerability (CVE-2023-49070)"},{"cve":"CVE-2023-49070","qid":"731037","title":"Apache OFBiz Unauthenticated Remote Code Execution (RCE) Vulnerability"}]},"source_records":{"cve_program":null,"nvd":{"publishedDate":"2023-12-05 08:15:00","lastModifiedDate":"2023-12-05 13:51:00","problem_types":["CWE-94"],"metrics":[],"configurations":{"CVE_data_version":"4.0","nodes":[]}},"legacy_mitre":{"record":null,"notes":[]}}}