Düşük
CVE-2026-68524: CVE-2026-68524: kod enjeksiyonu
Açıklama (NVD)
An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a "file:" URI to cause OFBiz to load an attacker-controlled Screen definition. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.
Özet bilgiler
- EPSS
- %0,22 (yüzdelik 12)
- CWE
- CWE-94
- Yama
- Yok / bilinmiyor