CVE-2024-23946: Apache OFBiz: Path traversal or file inclusion
Published Feb 28, 2024
·Updated
Possible path traversal in Apache OFBiz allowing file inclusion. Users are recommended to upgrade to version 18.12.12, that fixes the issue.
Affected Software
1 affected component
Apache OFBiz<18.12.12
Remediation
Patch Available
Event History
Feb 28, 2024
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
DescriptionWeakness
Feb 29, 2024
Data Sourced
via NVD·01:44 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-23946?
CVE-2024-23946 has a high severity due to the potential for unauthorized file inclusion through path traversal.
2
How do I fix CVE-2024-23946?
To fix CVE-2024-23946, upgrade to Apache OFBiz version 18.12.12 or later.
3
What is path traversal in the context of CVE-2024-23946?
Path traversal in CVE-2024-23946 refers to the ability of an attacker to access files outside of the intended directory structure.
4
Which versions of Apache OFBiz are affected by CVE-2024-23946?
Versions of Apache OFBiz prior to 18.12.12 are affected by CVE-2024-23946.
5
Is there a workaround for CVE-2024-23946?
There is no official workaround for CVE-2024-23946; upgrading to the fixed version is recommended.