Description (CNA)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache OFBiz | affected 0 before 18.12.14 |
CWE
CWE-22
References
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/security.html
- https://issues.apache.org/jira/browse/OFBIZ-13092
- https://lists.apache.org/thread/sv0xr8b1j7mmh5p37yldy9vmnzbodz2o
- http://www.openwall.com/lists/oss-security/2024/06/03/1
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.