CyberSec.Space Logo
Back to CVE Browser

CVE-2024-32113

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-05-08
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Affected Platforms (CPE)

📦
Apache

Ofbiz

< 18.12.13

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2024/05/09/1
🔗 https://issues.apache.org/jira/browse/OFBIZ-13006
🔗 https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd
🔗 https://ofbiz.apache.org/download.html
🔗 https://ofbiz.apache.org/security.html
🔗 http://www.openwall.com/lists/oss-security/2024/05/09/1
🔗 https://issues.apache.org/jira/browse/OFBIZ-13006
🔗 https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd

Related Vulnerabilities

CVE-2026-502238.8

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user...

CVE-2026-473428.8

A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges Thi...

CVE-2025-616236.5

Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recomm...

CVE-2025-591187.3

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. ...