Vulnerability Details CVE-2024-23946
Possible path traversal in Apache OFBiz allowing file inclusion.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.3%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2024-23946
-
-
cpe:2.3:a:apache:ofbiz:09.04
-
cpe:2.3:a:apache:ofbiz:09.04.01
-
cpe:2.3:a:apache:ofbiz:10.04
-
cpe:2.3:a:apache:ofbiz:10.04.01
-
cpe:2.3:a:apache:ofbiz:10.04.02
-
cpe:2.3:a:apache:ofbiz:10.04.03
-
cpe:2.3:a:apache:ofbiz:10.04.04
-
cpe:2.3:a:apache:ofbiz:10.04.05
-
cpe:2.3:a:apache:ofbiz:10.04.06
-
cpe:2.3:a:apache:ofbiz:11.04
-
cpe:2.3:a:apache:ofbiz:11.04.01
-
cpe:2.3:a:apache:ofbiz:11.04.02
-
cpe:2.3:a:apache:ofbiz:11.04.03
-
cpe:2.3:a:apache:ofbiz:11.04.04
-
cpe:2.3:a:apache:ofbiz:11.04.05
-
cpe:2.3:a:apache:ofbiz:11.04.06
-
cpe:2.3:a:apache:ofbiz:12.04
-
cpe:2.3:a:apache:ofbiz:12.04.01
-
cpe:2.3:a:apache:ofbiz:12.04.02
-
cpe:2.3:a:apache:ofbiz:12.04.03
-
cpe:2.3:a:apache:ofbiz:12.04.04
-
cpe:2.3:a:apache:ofbiz:12.04.05
-
cpe:2.3:a:apache:ofbiz:12.04.06
-
cpe:2.3:a:apache:ofbiz:13.07
-
cpe:2.3:a:apache:ofbiz:13.07.01
-
cpe:2.3:a:apache:ofbiz:13.07.02
-
cpe:2.3:a:apache:ofbiz:13.07.03
-
cpe:2.3:a:apache:ofbiz:16.11.01
-
cpe:2.3:a:apache:ofbiz:16.11.02
-
cpe:2.3:a:apache:ofbiz:16.11.03
-
cpe:2.3:a:apache:ofbiz:16.11.04
-
cpe:2.3:a:apache:ofbiz:16.11.05
-
cpe:2.3:a:apache:ofbiz:16.11.06
-
cpe:2.3:a:apache:ofbiz:16.11.07
-
cpe:2.3:a:apache:ofbiz:17.12.01
-
cpe:2.3:a:apache:ofbiz:17.12.03
-
cpe:2.3:a:apache:ofbiz:17.12.04
-
cpe:2.3:a:apache:ofbiz:17.12.05
-
cpe:2.3:a:apache:ofbiz:17.12.06
-
cpe:2.3:a:apache:ofbiz:17.12.07
-
cpe:2.3:a:apache:ofbiz:17.12.08
-
cpe:2.3:a:apache:ofbiz:17.12.09
-
cpe:2.3:a:apache:ofbiz:18.12.01
-
cpe:2.3:a:apache:ofbiz:18.12.02
-
cpe:2.3:a:apache:ofbiz:18.12.03
-
cpe:2.3:a:apache:ofbiz:18.12.04
-
cpe:2.3:a:apache:ofbiz:18.12.05
-
cpe:2.3:a:apache:ofbiz:18.12.06
-
cpe:2.3:a:apache:ofbiz:18.12.07
-
cpe:2.3:a:apache:ofbiz:18.12.09
-
cpe:2.3:a:apache:ofbiz:18.12.10
-
cpe:2.3:a:apache:ofbiz:18.12.11
-
cpe:2.3:a:apache:ofbiz:9.04
-
cpe:2.3:a:apache:ofbiz:9.04.01
-
cpe:2.3:a:apache:ofbiz:9.04.02