CVE-2017-9416 in Odoo

सारांश

द्वारा MITRE

Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• आरक्षित करना: 03/06/2017
• प्रकटीकरण: 04/06/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-101946
• CPE: तैयार
• CWE: CWE-22 (पुष्टि की गई)
• CVSS: 6.5 (NVD)
• EPSS: 0.05651
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Hospital, Transportation, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-9416
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-9416
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-9416/