CVE-2024-32113: Apache OFBiz Path Traversal Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2024-08-07. EPSS: 99.9% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Affected products

• Apache OFBiz: before 18.12.13 (fixed in 18.12.13)

Published 2024-05-08. Last modified 2026-06-17.