CVE-2019-14362

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value...

PT-2019-13641

Name of the Vulnerable Software and Affected Versions Openbravo ERP versions prior to 3.0PR19Q1.3 Description The issue allows remote authenticated attackers to replace a file on the server. This is achieved via the getAttachmentDirectoryForNewAttachment inpKey value. Recommendations For versions...