Apache OFBiz - Path Traversal (CVE-2024-32113)

CVE-2024-32113 is a severe path traversal vulnerability affecting Apache OFBiz, allowing unauthorized access to sensitive files and potential remote code execution.

CrowdSec has been tracking this vulnerability and its exploits since 19th of July 2024.

CrowdSec network data shows that most actors exploiting CVE-2024-32113 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. In addition, according to the CrowdSec network, attack volume against CVE-2024-32113 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.

Observed attack attempts specifically target URL paths under /webtools/control/forgotpassword;/programexport or similar encodings that may bypass directory restrictions.