Directory traversal

2019-07-2818:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.4%

JSON

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

CPENameOperatorVersion
openbravo_erpeq3.0 maintenance-pack0.1
openbravo_erpeq3.0 maintenance-pack1
openbravo_erpeq3.0 maintenance-pack10
openbravo_erpeq3.0 maintenance-pack10.1
openbravo_erpeq3.0 maintenance-pack10.2
openbravo_erpeq3.0 maintenance-pack10.3
openbravo_erpeq3.0 maintenance-pack11
openbravo_erpeq3.0 maintenance-pack11.1
openbravo_erpeq3.0 maintenance-pack12
openbravo_erpeq3.0 maintenance-pack12.1

Name	Operator	Version
openbravo_erp	eq	3.0 maintenance-pack0.1
openbravo_erp	eq	3.0 maintenance-pack1
openbravo_erp	eq	3.0 maintenance-pack10
openbravo_erp	eq	3.0 maintenance-pack10.1
openbravo_erp	eq	3.0 maintenance-pack10.2
openbravo_erp	eq	3.0 maintenance-pack10.3
openbravo_erp	eq	3.0 maintenance-pack11
openbravo_erp	eq	3.0 maintenance-pack11.1
openbravo_erp	eq	3.0 maintenance-pack12
openbravo_erp	eq	3.0 maintenance-pack12.1