What’s Vulnerable › Vulnerabilities

CVE-2019-14362

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-28 · updated 2026-06-17
• Weakness: CWE-22

Description

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

Affected products

• Openbravo Erp: 3.0, 3.0-maintenance_pack0.1, 3.0-maintenance_pack1, 3.0-maintenance_pack10, 3.0-maintenance_pack10.1, 3.0-maintenance_pack10.2 (+208)

References

• https://grep.blog/directory-traversal-openbravo/
• https://issues.openbravo.com/view.php?id=41413
• https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/
• https://grep.blog/directory-traversal-openbravo/
• https://issues.openbravo.com/view.php?id=41413
• https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/

Get alerted when CVE-2019-14362 or the next vulnerability affects your stack