medium5.3
CVE-2024-23946
Possible path traversal in Apache OFBiz allowing file inclusion.
Impact
Possible path traversal in Apache OFBiz allowing file inclusion. Users are recommended to upgrade to version 18.12.12, that fixes the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Ofbiz | before 18.12.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2024/02/28/9
- https://issues.apache.org/jira/browse/OFBIZ-12884
- https://lists.apache.org/thread/w4lp5ncpzttf41hn5bsc04mzq4o6lw3g
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/release-notes-18.12.12.html
- https://ofbiz.apache.org/security.html
- http://www.openwall.com/lists/oss-security/2024/02/28/9
- https://issues.apache.org/jira/browse/OFBIZ-12884
- https://lists.apache.org/thread/w4lp5ncpzttf41hn5bsc04mzq4o6lw3g
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/release-notes-18.12.12.html
- https://ofbiz.apache.org/security.html