{"id":"CVE-2024-36104","published":"2024-06-04T07:25:07Z","modified":"2025-02-13T17:52:36Z","title":"Apache OFBiz: Path traversal leading to a RCE","vendor":"Apache Software Foundation","product":"Apache OFBiz","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache OFBiz","versions":["< 18.12.14"]}],"description":{"text":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14.\n\nUsers are recommended to upgrade to version 18.12.14, which fixes the issue.","provenance":"source","from":"CVE.org"},"summary":{"text":"Apache OFBiz contains a path traversal flaw (CWE: Improper Limitation of a Pathname to a Restricted Directory) affecting versions before 18.12.14. An unauthenticated attacker with network access can exploit it without user interaction or special configuration, reaching high confidentiality and integrity impact on the affected system.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T12:59:42Z"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.87883,"percentile":0.99762,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-08-19","exploitedFirstSeen":"2024-08-19","ransomware":false,"evidence":[{"url":"https://www.fortiguard.com/outbreak-alert/apache-ofbiz-rce","date":"2024-08-19"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"}],"references":[{"url":"https://ofbiz.apache.org/download.html","tags":["mitigation"]},{"url":"https://ofbiz.apache.org/security.html","tags":["related"]},{"url":"https://issues.apache.org/jira/browse/OFBIZ-13092","tags":["issue-tracking"]},{"url":"https://lists.apache.org/thread/sv0xr8b1j7mmh5p37yldy9vmnzbodz2o","tags":["vendor-advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/03/1","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-35883","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-35883","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2024-06-17","earliestUrl":"https://github.com/ggfzx/CVE-2024-36104","repos":[{"name":"Groppoxx/CVE-2024-36104-PoC","url":"https://github.com/Groppoxx/CVE-2024-36104-PoC","stars":3,"created":"2026-07-29"},{"name":"ggfzx/CVE-2024-36104","url":"https://github.com/ggfzx/CVE-2024-36104","stars":2,"created":"2024-06-17"}]},"nuclei":[{"id":"CVE-2024-36104","name":"Apache OFBiz - Directory Traversal & Remote Code Execution","severity":"critical","path":"http/cves/2024/CVE-2024-36104.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36104.yaml"}],"first":{"date":"2024-06-17","source":"PoC-in-GitHub","url":"https://github.com/ggfzx/CVE-2024-36104"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-06-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-36104","provenance":"source"},{"date":"2024-06-17","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/ggfzx/CVE-2024-36104","provenance":"source"},{"date":"2024-08-19","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.fortiguard.com/outbreak-alert/apache-ofbiz-rce","provenance":"source"}],"speed":{"daysToPublicExploit":13,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":66.3,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 804 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.95,"detail":"percentile 0.9976"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.37,"detail":"base score 9.1"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-apache-ofbiz-cwe-22"}}