漏洞描述
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/06/03/1↗issues.apache.orghttps://issues.apache.org/jira/browse/OFBIZ-13092↗lists.apache.orghttps://lists.apache.org/thread/sv0xr8b1j7mmh5p37yldy9vmnzbodz2o↗ofbiz.apache.orghttps://ofbiz.apache.org/download.html↗ofbiz.apache.orghttps://ofbiz.apache.org/security.html↗