CVE-2019-14362: Openbravo ERP

Medium severity, CVSS 5.4. EPSS: 2.1% chance of exploitation in the next 30 days.

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

Affected products

• Openbravo Openbravo ERP: version 3.0 only

Published 2019-07-28. Last modified 2026-06-17.