Feed/CVE-2024-25065
CVE-2024-25065CRITICALCVSS 9.1

CVE-2024-25065

Published Feb 28, 2024·Updated Jun 17, 2026

NVD Description

Possible path traversal in Apache OFBiz allowing authentication bypass. Users are recommended to upgrade to version 18.12.12, that fixes the issue.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free