Vulnerability CVE-2024-32113
Published: 2024-05-08

Description:
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.

Users are recommended to upgrade to version 18.12.13, which fixes the issue.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Apache OFBiz Forgot Password Directory Traversal
jheysel-r7
24.06.2024

Type:

CWE-22

 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

 References:
https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13006
https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd
Copyright 2024, cxsecurity.com

 

Back to Top