Unrated severityNVD Advisory· Published Nov 12, 2025· Updated Nov 12, 2025
Apache OFBiz: Critical Remote Command Execution via Unrestricted File Upload
CVE-2025-59118
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.09.03.
Users are recommended to upgrade to version 24.09.03, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- ofbiz.apache.org/security.htmlmitrepatch
- lists.apache.org/thread/202263kpy7g76pzsy1fm96h9lcmhsqptmitrevendor-advisory
- issues.apache.org/jira/browse/OFBIZ-13292mitreissue-tracking
- ofbiz.apache.org/download.htmlmitremitigation
- ofbiz.apache.org/release-notes-24.09.03.htmlmitrerelease-notes
News mentions
0No linked articles in our index yet.