CVE-2025-59118

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue.

PUBLISHED Reserved 2025-09-09 | Published 2025-11-12 | Updated 2025-11-12 | Assigner apache

Problem types

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Credits

RedHive Team (security@hive.red) https://hive.red/en/ finder

References

www.openwall.com/lists/oss-security/2025/11/11/1

ofbiz.apache.org/download.html mitigation

ofbiz.apache.org/security.html patch

ofbiz.apache.org/release-notes-24.09.03.html release-notes

issues.apache.org/jira/browse/OFBIZ-13292 issue-tracking

lists.apache.org/thread/202263kpy7g76pzsy1fm96h9lcmhsqpt vendor-advisory

cve.org (CVE-2025-59118)

nvd.nist.gov (CVE-2025-59118)

Download JSON