漏洞描述
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
issues.apache.orghttps://issues.apache.org/jira/browse/OFBIZ-13006↗lists.apache.orghttps://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd↗ofbiz.apache.orghttps://ofbiz.apache.org/download.html↗ofbiz.apache.orghttps://ofbiz.apache.org/security.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2024-32113↗