Skip to content

CVE record · 1 source

CVE-2026-66903

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz.

Vendor: Apache Software Foundation
Product: Apache OFBiz
Weakness: CWE-24
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 2h ago

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz.

Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version…

Fix available CVE-2026-66903 Apache Software Foundation