CVE-2024-32113

CRITICAL

CVSS v3

9.8

CRITICAL

EPSS Score

93.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Technical Details

Published
5/8/2024
Exploit-DB
EDB-52020

Frequently Asked Questions

What is CVE-2024-32113?

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Is CVE-2024-32113 actively exploited?

Active exploitation of CVE-2024-32113 has not been confirmed. The EPSS score is 93.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2024-32113?

CVE-2024-32113 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2024-32113 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.