Lucene search
PRIOn knowledge basePRION:CVE-2013-3617HistoryNov 02, 2013 - 7:55 p.m.
Xxe
2013-11-0219:55:00
PRIOn knowledge base
www.prio-n.com
2
The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an external entity declaration in conjunction with an entity reference to /ws/dal/ADUser or other /ws/dal/XXX interfaces, related to an XML External Entity (XXE) issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openbravo_erp | eq | 2.50 | |
| openbravo_erp | le | 3.0 | |
| openbravo_erp | eq | 2.40 |
Related
cvelist
cvelist
CVE-2013-3617
2022-10-03 16:14:44
nvd
nvd
CVE-2013-3617
2013-11-02 19:55:04
cve
cve
CVE-2013-3617
2022-10-03 16:14:44
cert
cert
Openbravo ERP contains an information disclosure vulnerability
2013-10-30 00:00:00
checkpoint_advisories
checkpoint_advisories