CVE-2024-32113

Apache OFBiz allows remote code execution via path traversal in authenticated report scenarios.

Apache OFBiz contains a path traversal vulnerability enabling remote code execution for authenticated users accessing reports, posing a severe risk to DIB organizations relying on open-source ERP suites. This flaw is actively exploited and linked to ransomware campaigns, requiring immediate patching and vendor scrutiny to prevent unauthorized system compromise.

Shame score — Active exploitation of a high-severity RCE vulnerability in a widely-used open-source ERP suite demonstrates negligent security posture and exposes DIB organizations to critical compromise.