CVE-2024-23946

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 29, 2024
Updated: Aug 13, 2024
CWE ID 434
CWE ID 22

Summary

CVE-2024-23946 is a newly disclosed vulnerability in Apache OFBiz. This issue may allow an attacker to traverse paths and potentially include files, leading to potential security risks. The specific vulnerability lies in the application's handling of user-supplied input. It is strongly advised that users upgrade to version 18.12.12 of Apache OFBiz to mitigate this vulnerability and apply necessary security patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apache Software Foundation OFBiz
  • Apache OFBiz

Affected Vendors

  • Apache Software Foundation

Advisories, Assessments, and Mitigations