Apache OFBiz Path Traversal Vulnerability

This strike exploits a path traversal vulnerability in Apache OFBiz. The vulnerability arises from inadequate sanitization of input at the vulnerable endpoint /webtools/control/forgotPassword. An attacker can exploit this endpoint to access the ProgramExport functionality, which can then be leveraged for remote code execution. Successful exploitation allows unauthenticated remote attackers to execute arbitrary code with the privileges of the user running the vulnerable server.