CVE-2026-66903

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue...

CVE-2026-66903

Apache OFBiz versions before 24.09.08 are vulnerable to an Authenticated Path Traversal in the Catalog Image Management component. This security flaw allows an authenticated attacker to write image files outside of the intended directory. To mitigate this issue, users are recommended to upgrade t...

CVE-2026-66903 Apache OFBiz: Authenticated Path Traversal in Catalog Image Management

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue...

EUVD-2026-117496

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue...