From 9b4d05f6a3e189e1e865d80e5df7052a1de72234 Mon Sep 17 00:00:00 2001 From: Robert Dick Date: Fri, 12 Jun 2026 07:53:30 -0400 Subject: [PATCH 1/2] added debug instruction --- apache/ofbiz/CVE-2024-32113/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/apache/ofbiz/CVE-2024-32113/README.md b/apache/ofbiz/CVE-2024-32113/README.md index 98e3d512..ae43c7ff 100644 --- a/apache/ofbiz/CVE-2024-32113/README.md +++ b/apache/ofbiz/CVE-2024-32113/README.md @@ -15,6 +15,8 @@ To create a patched release, run `make_patched.sh`. This will create a directory ## Testing CVE-2024-32113 +**Note: If you are accessing the service with something other than 127.0.0.1, you need to add host-headers-allowed=YOUR_HOST_HEADER to /ofbiz/framework/security/config/security.properties** + With a vulnerable release running on port 8443 of your local machine, run `check_vulnerability.py` and it should display: From f5481f5d855244c7e34e7f4b8afb981080a0e2ed Mon Sep 17 00:00:00 2001 From: Robert Dick Date: Fri, 12 Jun 2026 08:05:02 -0400 Subject: [PATCH 2/2] added missing instruction --- apache/ofbiz/CVE-2024-32113/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apache/ofbiz/CVE-2024-32113/README.md b/apache/ofbiz/CVE-2024-32113/README.md index ae43c7ff..9c05ad57 100644 --- a/apache/ofbiz/CVE-2024-32113/README.md +++ b/apache/ofbiz/CVE-2024-32113/README.md @@ -15,7 +15,7 @@ To create a patched release, run `make_patched.sh`. This will create a directory ## Testing CVE-2024-32113 -**Note: If you are accessing the service with something other than 127.0.0.1, you need to add host-headers-allowed=YOUR_HOST_HEADER to /ofbiz/framework/security/config/security.properties** +**Note: If you are accessing the service with something other than 127.0.0.1, you need to add host-headers-allowed=YOUR_HOST_HEADER to /ofbiz/framework/security/config/security.properties and restart the container** With a vulnerable release running on port 8443 of your local machine, run `check_vulnerability.py` and it should display: