critical9.1
CVE-2024-25065
Possible path traversal in Apache OFBiz allowing authentication bypass.
Impact
Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Ofbiz | before 18.12.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2024/02/28/10
- https://issues.apache.org/jira/browse/OFBIZ-12887
- https://lists.apache.org/thread/rplfjp7ppn9ro49oo7jsrpj99m113lfc
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/release-notes-18.12.12.html
- https://ofbiz.apache.org/security.html
- http://www.openwall.com/lists/oss-security/2024/02/28/10
- https://issues.apache.org/jira/browse/OFBIZ-12887
- https://lists.apache.org/thread/rplfjp7ppn9ro49oo7jsrpj99m113lfc
- https://ofbiz.apache.org/download.html
- https://ofbiz.apache.org/release-notes-18.12.12.html
- https://ofbiz.apache.org/security.html