835 matches found
Apache OFBiz path traversal vulnerability (CNVD-2024-26187)
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A path traversal vulnerability exists in Apache OFBiz versions prior to 18.12.14, which can be exploited by...
CVE-2024-36104
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue...
CVE-2024-36104 Apache OFBiz: Path traversal leading to a RCE
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue...
CVE-2024-36104 Apache OFBiz: Path traversal leading to a RCE
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue...
CVE-2024-36104 Apache OFBiz: Path traversal leading to a RCE
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue...
Apache OFBiz 路径遍历漏洞
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A path traversal vulnerability exists in Apache OFBiz versions prior to 18.12.14, which can be exploited by...
Apache OFBiz forgotPassword/ProgramExport RCE
Apache OFBiz versions prior to 18.12.13 are vulnerable to a path traversal vulnerability CVE-2024-32113. The vulnerable endpoint /webtools/control/forgotPassword allows an attacker to access the ProgramExport endpoint which in turn allows for remote code execution in the context of the user runni...
Apache OFBiz 18.12.12 Directory Traversal
Exploit Title: Apache OFBiz 18.12.12 - Directory Traversal Google Dork: N/A Date: 2024-05-16 Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://ofbiz.apache.org/download.html Version: below example.createBlogPost...
Apache OFBiz 18.12.12 - Directory Traversal
Exploit Title: Apache OFBiz 18.12.12 - Directory Traversal Google Dork: N/A Date: 2024-05-16 Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://ofbiz.apache.org/download.html Version: below example.createBlogPost...
Apache OFBiz 18.12.12 - Directory Traversal Vulnerability
Exploit Title: Apache OFBiz 18.12.12 - Directory Traversal Google Dork: N/A Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://ofbiz.apache.org/download.html Version: below example.createBlogPost...
The vulnerability of the Apache OFBiz resource planning software lies in the incorrect restriction of the path name to the restricted directory. This allows a perpetrator to execute arbitrary code.
The vulnerability of Apache OFBiz’s resource planning software lies in incorrect restrictions on the path to the restricted-access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted URL address...
PT-2024-4426 · Apache · Apache Ofbiz
Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 18.12.14 Description: The issue affects Apache OFBiz due to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This vulnerability may allow a remote...
Apache OFBiz path traversal vulnerability (CNVD-2024-26533)
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A path traversal vulnerability exists in Apache OFBiz versions prior to 18.12.13, which stems from an...
CVE-2024-32113
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue...
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue...
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue...
CVE-2024-32113
CVE-2024-32113 describes a path traversal vulnerability in Apache OFBiz (affected:
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue...
Apache OFBiz 路径遍历漏洞
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A path traversal vulnerability exists in Apache OFBiz versions prior to 18.12.13, which stems from an...
CVE-2024-32113
Improper Limitation of a Pathname to a Restricted Directory ‘Path Traversal’ vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue. Recent assessments: Assessed Attacker Value: 0 Assessed Attacke...