CVE report
CVE-2023-50968high
Apache OFBiz < 18.12.11 - Server Side Request Forgery
Events 90d
46
Distinct IPs
36
Severity
high
CISA KEV
Not listed
Detection signature
An event counts toward CVE-2023-50968 when its URL path contains any of these (case-insensitive). This is what our matching is based on.
- · /partymgr/control
Pre-disclosure activity
all early actors →Analysing probe history around the publication date…
Recent probe volume (last 7 days)
peak: 3 events/dayeventsdistinct IPs
Downloads & integrations
Top sources probing for CVE-2023-50968
- 45.156.129.1263 eventsPortugal
- 109.105.209.202 eventsPortugal
- 45.156.129.1232 eventsPortugal
- 185.226.196.302 eventsPortugal
- 109.105.209.182 eventsPortugal
- 45.156.129.1602 eventsPortugal
- 109.105.210.832 eventsPortugal
- 45.156.128.1582 eventsPortugal
- 45.156.129.1172 eventsPortugal
- 45.156.129.1221 eventsPortugal
- 45.156.129.1571 eventsPortugal
- 45.156.128.1721 eventsPortugal
- 185.226.196.281 eventsPortugal
- 45.156.129.1721 eventsPortugal
- 185.226.197.691 eventsPortugal
- 45.156.129.1281 eventsPortugal
- 45.156.128.1131 eventsPortugal
- 185.226.196.251 eventsPortugal
- 45.156.129.1681 eventsPortugal
- 185.226.196.191 eventsPortugal
- 45.156.129.1631 eventsPortugal
- 45.156.129.1101 eventsPortugal
- 45.156.128.1071 eventsPortugal
- 45.156.129.1671 eventsPortugal
- 103.168.67.1591 eventsUnited States· DIGI VPS
- 45.156.129.1611 eventsPortugal
- 185.226.198.41 eventsPortugal· Sistemas Informaticos, S.A.
- 45.156.128.1531 eventsPortugal
- 185.226.196.271 eventsPortugal
- 109.105.209.191 eventsPortugal
Top networks the attempts come from
Fingerprints of the clients exploiting this
The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.
Sample request paths observed
- //partymgr/control/main
- /partymgr/control/main