CVE-2024-32113
Assigner: apache
Published: 2024-05-08T14:50:07.272Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache OFBiz
vendor: Apache Software Foundation
versions: lessThan: 18.12.13
status: affected
version: 0
versionType: custom
credits: type: finder
value: Qiyi Zhang (RacerZ) @secsys from Fudan
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.<p>This issue affects Apache OFBiz: before 18.12.13.</p><p>Users are recommended to upgrade to version 18.12.13, which fixes the issue.</p>
value: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.

Users are recommended to upgrade to version 18.12.13, which fixes the issue.


metrics: other: content: text: important
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
type: CWE
source: discovery: EXTERNAL
title: Apache OFBiz: Path traversal leading to RCE
x_generator: engine: Vulnogram 0.1.0-dev