Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:4AA0028D-8884-476B-8A07-9368A23A58B3
HistoryMay 08, 2024 - 12:00 a.m.

CVE-2024-32113

2024-05-0800:00:00
attackerkb.com
4
apache ofbiz
path traversal
cve-2024-32113
security vulnerability
upgrade

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0.904

Percentile

98.9%

JSON

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.

Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Recent assessments:

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0

Related

githubexploit 1
vulnrichment 1
packetstorm 1
exploitdb 1
nessus 1
nvd 1
cvelist 1
cve 1
nuclei 1
cisa_kev 1
zdt 1
metasploit 1
thn 4
f5 1
rapid7blog 3
githubexploit
githubexploit
Exploit for Path Traversal in Apache Ofbiz
2024-08-07 07:12:56
vulnrichment
vulnrichment
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
2024-05-08 14:50:07
packetstorm
packetstorm
Apache OFBiz Forgot Password Directory Traversal
2024-06-18 00:00:00
exploitdb
exploitdb
Apache OFBiz 18.12.12 - Directory Traversal
2024-05-19 00:00:00
nessus
nessus
Apache OFBiz Path Traversal (CVE-2024-32113)
2024-08-20 00:00:00
nvd
nvd
CVE-2024-32113
2024-05-08 15:15:10
cvelist
cvelist
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
2024-05-08 14:50:07
cve
cve
CVE-2024-32113
2024-05-08 15:15:10
nuclei
nuclei
Apache OFBiz Directory Traversal - Remote Code Execution
2024-06-14 16:26:31
cisa_kev
cisa_kev
Apache OFBiz Path Traversal Vulnerability
2024-08-07 00:00:00
zdt
zdt
Apache OFBiz 18.12.12 - Directory Traversal Vulnerability
2024-05-19 00:00:00
metasploit
metasploit
Apache OFBiz forgotPassword/ProgramExport RCE
2024-06-14 23:41:12
thn
thn
Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal
2024-08-02 10:52:00
CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports
2024-08-28 06:50:00
New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution
2024-08-06 04:16:00
f5
f5
K000141002: Apache OFBiz vulnerabilities CVE-2024-32113, CVE-2024-36104, and CVE-2024-45195
2024-09-09 00:00:00
rapid7blog
rapid7blog
CVE-2024-45195: Apache OFBiz Unauthenticated Remote Code Execution (Fixed)
2024-09-05 14:54:31
Metasploit Weekly Wrap-Up 06/21/2024
2024-06-21 18:53:52
Metasploit Weekly Wrap-Up 08/30/2024
2024-08-30 18:43:05

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0.904

Percentile

98.9%

JSON
Related for AKB:4AA0028D-8884-476B-8A07-9368A23A58B3
githubexploit1vulnrichment1packetstorm1exploitdb1nessus1nvd1cvelist1cve1nuclei1cisa_kev1zdt1metasploit1thn4f51rapid7blog3