CVE-2019-14362
N/A
Published: July 28, 2019 at 05:26 PM UTC
Updated: June 17, 2026 at 02:18 AM UTC
1 product affected across 1 vendorOpenbravo ERP
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.03.0 maintenance_pack0.13.0 maintenance_pack13.0 maintenance_pack103.0 maintenance_pack10.13.0 maintenance_pack10.23.0 maintenance_pack10.33.0 maintenance_pack113.0 maintenance_pack11.13.0 maintenance_pack123.0 maintenance_pack12.13.0 maintenance_pack12.23.0 maintenance_pack133.0 maintenance_pack13.13.0 maintenance_pack13.23.0 maintenance_pack143.0 maintenance_pack14.13.0 maintenance_pack14.23.0 maintenance_pack153.0 maintenance_pack15.13.0 maintenance_pack15.23.0 maintenance_pack163.0 maintenance_pack16.13.0 maintenance_pack16.23.0 maintenance_pack16.33.0 maintenance_pack173.0 maintenance_pack17.13.0 maintenance_pack17.23.0 maintenance_pack17.33.0 maintenance_pack183.0 maintenance_pack18.13.0 maintenance_pack18.23.0 maintenance_pack18.33.0 maintenance_pack18.43.0 maintenance_pack18.53.0 maintenance_pack193.0 maintenance_pack19.13.0 maintenance_pack19.23.0 maintenance_pack19.33.0 maintenance_pack19.43.0 maintenance_pack23.0 maintenance_pack2.13.0 maintenance_pack2.23.0 maintenance_pack2.33.0 maintenance_pack2.43.0 maintenance_pack203.0 maintenance_pack213.0 maintenance_pack21.13.0 maintenance_pack223.0 maintenance_pack22.13.0 maintenance_pack22.23.0 maintenance_pack22.33.0 maintenance_pack233.0 maintenance_pack23.13.0 maintenance_pack23.23.0 maintenance_pack243.0 maintenance_pack24.13.0 maintenance_pack24.23.0 maintenance_pack253.0 maintenance_pack25.13.0 maintenance_pack25.23.0 maintenance_pack263.0 maintenance_pack26.13.0 maintenance_pack26.23.0 maintenance_pack26.33.0 maintenance_pack26.43.0 maintenance_pack273.0 maintenance_pack27.13.0 maintenance_pack283.0 maintenance_pack28.13.0 maintenance_pack28.23.0 maintenance_pack28.33.0 maintenance_pack28.43.0 maintenance_pack28.53.0 maintenance_pack293.0 maintenance_pack29.13.0 maintenance_pack29.23.0 maintenance_pack29.33.0 maintenance_pack29.43.0 maintenance_pack33.0 maintenance_pack3.13.0 maintenance_pack3.23.0 maintenance_pack303.0 maintenance_pack30.13.0 maintenance_pack30.23.0 maintenance_pack30.33.0 maintenance_pack313.0 maintenance_pack31.13.0 maintenance_pack31.23.0 maintenance_pack31.33.0 maintenance_pack31.43.0 maintenance_pack43.0 maintenance_pack4.13.0 maintenance_pack4.23.0 maintenance_pack53.0 maintenance_pack5.13.0 maintenance_pack5.23.0 maintenance_pack5.33.0 maintenance_pack63.0 maintenance_pack6.13.0 maintenance_pack6.23.0 maintenance_pack73.0 maintenance_pack7.13.0 maintenance_pack7.23.0 maintenance_pack7.33.0 maintenance_pack83.0 maintenance_pack8.13.0 maintenance_pack8.23.0 maintenance_pack8.33.0 maintenance_pack8.43.0 maintenance_pack93.0 maintenance_pack9.13.0 maintenance_pack9.23.0 maintenance_pack9.33.0 pr14q23.0 pr14q2.13.0 pr14q2.23.0 pr14q2.33.0 pr14q2.43.0 pr14q2.53.0 pr14q2.63.0 pr14q33.0 pr14q3.13.0 pr14q3.23.0 pr14q3.33.0 pr14q3.43.0 pr14q3.53.0 pr14q3.63.0 pr14q3.73.0 pr14q3.83.0 pr14q43.0 pr15q13.0 pr15q1.13.0 pr15q1.23.0 pr15q1.33.0 pr15q1.43.0 pr15q1.53.0 pr15q23.0 pr15q2.13.0 pr15q2.23.0 pr15q2.33.0 pr15q2.43.0 pr15q2.53.0 pr15q2.63.0 pr15q33.0 pr15q3.13.0 pr15q3.23.0 pr15q3.33.0 pr15q3.43.0 pr15q3.53.0 pr15q43.0 pr15q4.13.0 pr15q4.23.0 pr15q4.33.0 pr15q4.43.0 pr15q4.53.0 pr15q4.63.0 pr16q13.0 pr16q1.13.0 pr16q1.23.0 pr16q1.33.0 pr16q23.0 pr16q2.13.0 pr16q2.23.0 pr16q2.33.0 pr16q2.43.0 pr16q33.0 pr16q3.13.0 pr16q3.23.0 pr16q3.33.0 pr16q3.43.0 pr16q3.53.0 pr16q43.0 pr16q4.13.0 pr16q4.23.0 pr16q4.33.0 pr16q4.43.0 pr17q13.0 pr17q1.13.0 pr17q1.23.0 pr17q1.33.0 pr17q23.0 pr17q2.13.0 pr17q2.23.0 pr17q2.33.0 pr17q2.43.0 pr17q33.0 pr17q3.13.0 pr17q3.23.0 pr17q3.33.0 pr17q43.0 pr17q4.13.0 pr17q4.23.0 pr18q13.0 pr18q1.13.0 pr18q1.23.0 pr18q1.33.0 pr18q23.0 pr18q2.13.0 pr18q2.23.0 pr18q2.33.0 pr18q33.0 pr18q3.13.0 pr18q3.23.0 pr18q3.33.0 pr18q3.43.0 pr18q3.53.0 pr18q43.0 pr18q4.13.0 pr18q4.23.0 pr18q4.33.0 pr19q13.0 pr19q1.13.0 pr19q1.2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://grep.blog/directory-traversal-openbravo/x_refsource_MISCExploitPatchVendor Advisory
Source: [email protected]
https://issues.openbravo.com/view.php?id=41413x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/Quick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card