🚨 CVE-2026-66903
Authenticated Path Traversal in Catalog Image Management allows writing image files outside the intended directory in Apache OFBiz.



This issue affects Apache OFBiz: before 24.09.08.



Users are recommended to upgrade to version 24.09.08, which fixes the issue.