Lucene search
ApacheCVELIST:CVE-2024-25065HistoryFeb 28, 2024 - 3:42 p.m.
CVE-2024-25065 Apache OFBiz: Path traversal allowing authentication bypass.
2024-02-2815:42:50
CWE-22
apache
www.cve.org
1
apache
ofbiz
path traversal
authentication bypass
upgrade
Possible path traversal in Apache OFBiz allowing authentication bypass.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Apache OFBiz",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "18.12.12",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
prion
prion
Path traversal
2024-02-29 01:44:00
nvd
nvd
CVE-2024-25065
2024-02-29 01:44:14
cve
cve
CVE-2024-25065
2024-02-29 01:44:14