.. / CVE-2024-36104

• LFI
• Nuclei
• Web

Exploit for Apache OFBiz - Path Traversal (CVE-2024-36104)

Description:

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.

Nuclei Template

View the template here CVE-2024-36104.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-36104.yaml

References: