CVE-2019-14362

5.4 mediumEPSS 2.1%

Medium (5.4) in openbravo openbravo erp. EPSS 2.1% chance of exploitation in the next 30 days.

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2019-07-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openbravo:openbravo_erp

References

https://grep.blog/directory-traversal-openbravo/
https://issues.openbravo.com/view.php?id=41413
https://www.sitincloud.com/securite/directory-traversal-openbravo-erp/
https://grep.blog/directory-traversal-openbravo/
https://issues.openbravo.com/view.php?id=41413

Check your stack JSON