CyberSec.Space Logo
Back to CVE Browser

CVE-2025-59118

HIGH
7.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-11-12
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue.

Affected Platforms (CPE)

📦
Apache

Ofbiz

< 24.09.03

References & Advisories

🔗 https://issues.apache.org/jira/browse/OFBIZ-13292
🔗 https://lists.apache.org/thread/202263kpy7g76pzsy1fm96h9lcmhsqpt
🔗 https://ofbiz.apache.org/download.html
🔗 https://ofbiz.apache.org/release-notes-24.09.03.html
🔗 https://ofbiz.apache.org/security.html
🔗 http://www.openwall.com/lists/oss-security/2025/11/11/1

Related Vulnerabilities

CVE-2026-502238.8

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache OFBiz allows a low-privileged authenticated user...

CVE-2026-473428.8

A privilege escalation vulnerability in Apache OFBiz allows a low-privileged authenticated user to obtain higher privileges Thi...

CVE-2025-616236.5

Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recomm...

CVE-2025-544669.8

Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin. T...