Cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*

Apache OFBiz versions prior to 24.09.08 are vulnerable to critical flaws including authenticated path traversal in Catalog Image Management and pre-authentication remote code execution.