CVE-2017-9416 in Odoo

摘要

由 MITRE

Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 预定: 2017-06-03
• 披露: 2017-06-04
• 管理: 已接受
• 条目: VDB-101946
• CPE: 准备好
• CWE: CWE-22 (已确认)
• CVSS: 6.5 (NVD)
• EPSS: 0.05651
• KEV: 否
• 活动: 非常低
• 部门: Insurance, Energy, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-9416
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-9416
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-9416/