1name: crowdsecurity/vpatch-CVE-2024-32113
2description: "Apache OFBiz - Path Traversal (CVE-2024-32113)"
3rules:
4  - and:
5      - zones:
6          - METHOD
7        match:
8          type: equals
9          value: POST
10      - zones:
11          - URI
12        transform:
13          - lowercase
14        match:
15          type: equals
16          value: /webtools/control/forgotpassword;/programexport
17labels:
18  type: exploit
19  service: http
20  confidence: 3
21  spoofable: 0
22  behavior: "http:exploit"
23  label: "Apache OFBiz - Path Traversal"
24  classification:
25    - cve.CVE-2024-32113
26    - attack.T1595
27    - attack.T1190
28    - cwe.CWE-22
29