CVE-2024-25065

Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue...

CVE-2024-25065 Apache OFBiz: Path traversal allowing authentication bypass.

Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue...

CVE-2024-25065

Apache OFBiz, an enterprise resource planning (ERP) system, contains a path traversal vulnerability in versions prior to 18.12.12 . The root cause is identified as incorrect restrictions on the path to the restricted-access catalog, which allows a remote attacker to bypass the authentication proc...