CVE-2024-32113
Apache OFBiz Path Traversal Vulnerability
CVSS
—
Sem CVSS
EPSS
99.9%
p100
KEV
SIM
7 de ago. de 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Apache / OFBiz
Vulnerabilidade
Apache OFBiz Path Traversal Vulnerability
Adicionado ao KEV
7 de ago. de 2024
Corrigir até
28 de ago. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd; https://nvd.nist.gov/vuln/detail/CVE-2024-32113