Zero-day authentication bypass vulnerability discovered in Apache OFBiz ERP system

The SonicWall threat research team has uncovered a zero-day authentication bypass vulnerability in Apache OFBiz, an open-source Enterprise Resource Planning (ERP) system. The vulnerability, tagged as CVE-2023-51467, holds a CVSS score of 9.8, indicating a high severity level.

The implications of this flaw could be significant if exploited by threat actors. The research indicates that it could lead to the disclosure of sensitive data or even grant the ability to execute arbitrary code.

Following this discovery, SonicWall has informed Apache OFBiz about the vulnerability, providing them with advanced notice to develop and deploy patches or other mitigation strategies.

For those utilizing Apache OFBiz, it is crucial to update to version 18.12.11 or later immediately to protect against potential exploitation of this vulnerability.