Lucene search

China National Vulnerability DatabaseCNVD-2023-71722

HistoryAug 31, 2023 - 12:00 a.m.

Apache OFBiz is the United States Apache (Apache) Foundation of a set of enterprise resource planning (ERP) system. The system provides a set of Java-based Web application components and tools. Apache OFBiz suffers from a path traversal vulnerability that stems from the application failing to properly filter special elements in the path of a resource or file. An attacker could exploit the vulnerability to cause arbitrary file reads.

2023-08-3100:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache ofbiz

erp system

vulnerability

path traversal

file reads

linux kernel

memory misreference

system crash

kernel information

open source

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A memory misreference vulnerability exists in the Linux kernel, which arises from a mix-up in the instructions responsible for freeing memory in the memory management subsystem, and can be exploited by a local attacker to cause a system crash or lead to the disclosure of kernel information.