CVE-2024-25065

Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue...

CVE-2024-25065 Apache OFBiz: Path traversal allowing authentication bypass.

Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue...

CVE-2024-25065

Apache OFBiz (versions prior to 18.12.12 ) is vulnerable to a path traversal flaw caused by incorrect restrictions on the path to the restricted-access catalog. This vulnerability allows a remote attacker to bypass the authentication process and potentially access files and directories stored out...