Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fjgw-wf66-xqjj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

EPSS

Процентиль: 52%
0.00287
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.4
nvd
больше 6 лет назад

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

EPSS

Процентиль: 52%
0.00287
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-22