Search Results | AttackerKB

2 Total Results

Displaying 1-2 of 2

Attacker Value

Very High

CVE-2024-45195

Disclosure Date: September 04, 2024 (last updated September 06, 2024)

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

Attacker Value

Unknown

CVE-2024-36104

Disclosure Date: June 04, 2024 (last updated June 04, 2024)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.