CVE-2024-32113 PoC — Apache OFBiz: Path traversal leading to RCE

Source

Associated Vulnerability

Description

CVE-2024-32113-Apache-OFBiz<18.12.13-Exploit

Readme

# CVE-2024-32113 Exploit

Apache OFBiz Path Traversal to RCE exploit.

## Description

CVE-2024-32113 is a Path Traversal vulnerability that leads to Remote Code Execution (RCE) in Apache OFBiz.

**Vulnerability**: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.

**Affected Versions**: Apache OFBiz before 18.12.13

**Solution**: Upgrade to version 18.12.13

## Usage

```bash
./exploit.py IP:PORT
```

Example:
```bash
./exploit.py 10.10.10.10:8443
```

Once connected, type commands to execute on the remote system.

<img width="1237" height="314" alt="image" src="https://github.com/user-attachments/assets/9584a6f5-b4f5-4e72-8605-5a0f3abfc416" />

## References

- https://nvd.nist.gov/vuln/detail/cve-2024-32113
- https://issues.apache.org/jira/browse/OFBIZ-13006
- https://github.com/Mr-xn/CVE-2024-32113

## Disclaimer

This tool is for educational and authorized testing purposes only.

File Snapshot

 [4.0K]  /data/pocs/1047373398dafa8c30a6b9241debcdfc1c7e9272
├── [2.2K]  exploit.py
└── [ 957]  README.md

1 directory, 2 files

Remarks