title: Apache OFBiz: Path traversal or file inclusion
description: Possible path traversal in Apache OFBiz allowing file inclusion.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
defaultStatus: unaffected
product: Apache OFBiz
vendor: Apache Software Foundation
versions:
lessThan: 18.12.12, status: affected, version: 0, versionType: custom
}
metrics:
other: [
content: {'text': 'critical'}
type: Textual description of severity
]