CVE:CVE-2019-14362
CNNVD:CNNVD-201907-1421
Openbravo ERP是一套基于Web的企业资源计划（ERP）解决方案。
Openbravo ERP 3.0PR19Q1.3之前版本中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade openbravo openbravo_erp to a higher version than 3.0,3.0:maintenance_pack0.1,3.0:maintenance_pack1,3.0:maintenance_pack10,3.0:maintenance_pack10.1,3.0:maintenance_pack10.2,3.0:maintenance_pack10.3,3.0:maintenance_pack11,3.0:maintenance_pack11.1,3.0:maintenance_pack12,3.0:maintenance_pack12.1,3.0:maintenance_pack12.2,3.0:maintenance_pack13,3.0:maintenance_pack13.1,3.0:maintenance_pack13.2,3.0:maintenance_pack14,3.0:maintenance_pack14.1,3.0:maintenance_pack14.2,3.0:maintenance_pack15,3.0:maintenance_pack15.1,3.0:maintenance_pack15.2,3.0:maintenance_pack16,3.0:maintenance_pack16.1,3.0:maintenance_pack16.2,3.0:maintenance_pack16.3,3.0:maintenance_pack17,3.0:maintenance_pack17.1,3.0:maintenance_pack17.2,3.0:maintenance_pack17.3,3.0:maintenance_pack18,3.0:maintenance_pack18.1,3.0:maintenance_pack18.2,3.0:maintenance_pack18.3,3.0:maintenance_pack18.4,3.0:maintenance_pack18.5,3.0:maintenance_pack19,3.0:maintenance_pack19.1,3.0:maintenance_pack19.2,3.0:maintenance_pack19.3,3.0:maintenance_pack19.4,3.0:maintenance_pack2,3.0:maintenance_pack2.1,3.0:maintenance_pack2.2,3.0:maintenance_pack2.3,3.0:maintenance_pack2.4,3.0:maintenance_pack20,3.0:maintenance_pack21,3.0:maintenance_pack21.1,3.0:maintenance_pack22,3.0:maintenance_pack22.1,3.0:maintenance_pack22.2,3.0:maintenance_pack22.3,3.0:maintenance_pack23,3.0:maintenance_pack23.1,3.0:maintenance_pack23.2,3.0:maintenance_pack24,3.0:maintenance_pack24.1,3.0:maintenance_pack24.2,3.0:maintenance_pack25,3.0:maintenance_pack25.1,3.0:maintenance_pack25.2,3.0:maintenance_pack26,3.0:maintenance_pack26.1,3.0:maintenance_pack26.2,3.0:maintenance_pack26.3,3.0:maintenance_pack26.4,3.0:maintenance_pack27,3.0:maintenance_pack27.1,3.0:maintenance_pack28,3.0:maintenance_pack28.1,3.0:maintenance_pack28.2,3.0:maintenance_pack28.3,3.0:maintenance_pack28.4,3.0:maintenance_pack28.5,3.0:maintenance_pack29,3.0:maintenance_pack29.1,3.0:maintenance_pack29.2,3.0:maintenance_pack29.3,3.0:maintenance_pack29.4,3.0:maintenance_pack3,3.0:maintenance_pack3.1,3.0:maintenance_pack3.2,3.0:maintenance_pack30,3.0:maintenance_pack30.1,3.0:maintenance_pack30.2,3.0:maintenance_pack30.3,3.0:maintenance_pack31,3.0:maintenance_pack31.1,3.0:maintenance_pack31.2,3.0:maintenance_pack31.3,3.0:maintenance_pack31.4,3.0:maintenance_pack4,3.0:maintenance_pack4.1,3.0:maintenance_pack4.2,3.0:maintenance_pack5,3.0:maintenance_pack5.1,3.0:maintenance_pack5.2,3.0:maintenance_pack5.3,3.0:maintenance_pack6,3.0:maintenance_pack6.1,3.0:maintenance_pack6.2,3.0:maintenance_pack7,3.0:maintenance_pack7.1,3.0:maintenance_pack7.2,3.0:maintenance_pack7.3,3.0:maintenance_pack8,3.0:maintenance_pack8.1,3.0:maintenance_pack8.2,3.0:maintenance_pack8.3,3.0:maintenance_pack8.4,3.0:maintenance_pack9,3.0:maintenance_pack9.1,3.0:maintenance_pack9.2,3.0:maintenance_pack9.3,3.0:pr14q2,3.0:pr14q2.1,3.0:pr14q2.2,3.0:pr14q2.3,3.0:pr14q2.4,3.0:pr14q2.5,3.0:pr14q2.6,3.0:pr14q3,3.0:pr14q3.1,3.0:pr14q3.2,3.0:pr14q3.3,3.0:pr14q3.4,3.0:pr14q3.5,3.0:pr14q3.6,3.0:pr14q3.7,3.0:pr14q3.8,3.0:pr14q4,3.0:pr15q1,3.0:pr15q1.1,3.0:pr15q1.2,3.0:pr15q1.3,3.0:pr15q1.4,3.0:pr15q1.5,3.0:pr15q2,3.0:pr15q2.1,3.0:pr15q2.2,3.0:pr15q2.3,3.0:pr15q2.4,3.0:pr15q2.5,3.0:pr15q2.6,3.0:pr15q3,3.0:pr15q3.1,3.0:pr15q3.2,3.0:pr15q3.3,3.0:pr15q3.4,3.0:pr15q3.5,3.0:pr15q4,3.0:pr15q4.1,3.0:pr15q4.2,3.0:pr15q4.3,3.0:pr15q4.4,3.0:pr15q4.5,3.0:pr15q4.6,3.0:pr16q1,3.0:pr16q1.1,3.0:pr16q1.2,3.0:pr16q1.3,3.0:pr16q2,3.0:pr16q2.1,3.0:pr16q2.2,3.0:pr16q2.3,3.0:pr16q2.4,3.0:pr16q3,3.0:pr16q3.1,3.0:pr16q3.2,3.0:pr16q3.3,3.0:pr16q3.4,3.0:pr16q3.5,3.0:pr16q4,3.0:pr16q4.1,3.0:pr16q4.2,3.0:pr16q4.3,3.0:pr16q4.4,3.0:pr17q1,3.0:pr17q1.1,3.0:pr17q1.2,3.0:pr17q1.3,3.0:pr17q2,3.0:pr17q2.1,3.0:pr17q2.2,3.0:pr17q2.3,3.0:pr17q2.4,3.0:pr17q3,3.0:pr17q3.1,3.0:pr17q3.2,3.0:pr17q3.3,3.0:pr17q4,3.0:pr17q4.1,3.0:pr17q4.2,3.0:pr18q1,3.0:pr18q1.1,3.0:pr18q1.2,3.0:pr18q1.3,3.0:pr18q2,3.0:pr18q2.1,3.0:pr18q2.2,3.0:pr18q2.3,3.0:pr18q3,3.0:pr18q3.1,3.0:pr18q3.2,3.0:pr18q3.3,3.0:pr18q3.4,3.0:pr18q3.5,3.0:pr18q4,3.0:pr18q4.1,3.0:pr18q4.2,3.0:pr18q4.3,3.0:pr19q1,3.0:pr19q1.1,3.0:pr19q1.2,and avoid the version 3.0,3.0:maintenance_pack0.1,3.0:maintenance_pack1,3.0:maintenance_pack10,3.0:maintenance_pack10.1,3.0:maintenance_pack10.2,3.0:maintenance_pack10.3,3.0:maintenance_pack11,3.0:maintenance_pack11.1,3.0:maintenance_pack12,3.0:maintenance_pack12.1,3.0:maintenance_pack12.2,3.0:maintenance_pack13,3.0:maintenance_pack13.1,3.0:maintenance_pack13.2,3.0:maintenance_pack14,3.0:maintenance_pack14.1,3.0:maintenance_pack14.2,3.0:maintenance_pack15,3.0:maintenance_pack15.1,3.0:maintenance_pack15.2,3.0:maintenance_pack16,3.0:maintenance_pack16.1,3.0:maintenance_pack16.2,3.0:maintenance_pack16.3,3.0:maintenance_pack17,3.0:maintenance_pack17.1,3.0:maintenance_pack17.2,3.0:maintenance_pack17.3,3.0:maintenance_pack18,3.0:maintenance_pack18.1,3.0:maintenance_pack18.2,3.0:maintenance_pack18.3,3.0:maintenance_pack18.4,3.0:maintenance_pack18.5,3.0:maintenance_pack19,3.0:maintenance_pack19.1,3.0:maintenance_pack19.2,3.0:maintenance_pack19.3,3.0:maintenance_pack19.4,3.0:maintenance_pack2,3.0:maintenance_pack2.1,3.0:maintenance_pack2.2,3.0:maintenance_pack2.3,3.0:maintenance_pack2.4,3.0:maintenance_pack20,3.0:maintenance_pack21,3.0:maintenance_pack21.1,3.0:maintenance_pack22,3.0:maintenance_pack22.1,3.0:maintenance_pack22.2,3.0:maintenance_pack22.3,3.0:maintenance_pack23,3.0:maintenance_pack23.1,3.0:maintenance_pack23.2,3.0:maintenance_pack24,3.0:maintenance_pack24.1,3.0:maintenance_pack24.2,3.0:maintenance_pack25,3.0:maintenance_pack25.1,3.0:maintenance_pack25.2,3.0:maintenance_pack26,3.0:maintenance_pack26.1,3.0:maintenance_pack26.2,3.0:maintenance_pack26.3,3.0:maintenance_pack26.4,3.0:maintenance_pack27,3.0:maintenance_pack27.1,3.0:maintenance_pack28,3.0:maintenance_pack28.1,3.0:maintenance_pack28.2,3.0:maintenance_pack28.3,3.0:maintenance_pack28.4,3.0:maintenance_pack28.5,3.0:maintenance_pack29,3.0:maintenance_pack29.1,3.0:maintenance_pack29.2,3.0:maintenance_pack29.3,3.0:maintenance_pack29.4,3.0:maintenance_pack3,3.0:maintenance_pack3.1,3.0:maintenance_pack3.2,3.0:maintenance_pack30,3.0:maintenance_pack30.1,3.0:maintenance_pack30.2,3.0:maintenance_pack30.3,3.0:maintenance_pack31,3.0:maintenance_pack31.1,3.0:maintenance_pack31.2,3.0:maintenance_pack31.3,3.0:maintenance_pack31.4,3.0:maintenance_pack4,3.0:maintenance_pack4.1,3.0:maintenance_pack4.2,3.0:maintenance_pack5,3.0:maintenance_pack5.1,3.0:maintenance_pack5.2,3.0:maintenance_pack5.3,3.0:maintenance_pack6,3.0:maintenance_pack6.1,3.0:maintenance_pack6.2,3.0:maintenance_pack7,3.0:maintenance_pack7.1,3.0:maintenance_pack7.2,3.0:maintenance_pack7.3,3.0:maintenance_pack8,3.0:maintenance_pack8.1,3.0:maintenance_pack8.2,3.0:maintenance_pack8.3,3.0:maintenance_pack8.4,3.0:maintenance_pack9,3.0:maintenance_pack9.1,3.0:maintenance_pack9.2,3.0:maintenance_pack9.3,3.0:pr14q2,3.0:pr14q2.1,3.0:pr14q2.2,3.0:pr14q2.3,3.0:pr14q2.4,3.0:pr14q2.5,3.0:pr14q2.6,3.0:pr14q3,3.0:pr14q3.1,3.0:pr14q3.2,3.0:pr14q3.3,3.0:pr14q3.4,3.0:pr14q3.5,3.0:pr14q3.6,3.0:pr14q3.7,3.0:pr14q3.8,3.0:pr14q4,3.0:pr15q1,3.0:pr15q1.1,3.0:pr15q1.2,3.0:pr15q1.3,3.0:pr15q1.4,3.0:pr15q1.5,3.0:pr15q2,3.0:pr15q2.1,3.0:pr15q2.2,3.0:pr15q2.3,3.0:pr15q2.4,3.0:pr15q2.5,3.0:pr15q2.6,3.0:pr15q3,3.0:pr15q3.1,3.0:pr15q3.2,3.0:pr15q3.3,3.0:pr15q3.4,3.0:pr15q3.5,3.0:pr15q4,3.0:pr15q4.1,3.0:pr15q4.2,3.0:pr15q4.3,3.0:pr15q4.4,3.0:pr15q4.5,3.0:pr15q4.6,3.0:pr16q1,3.0:pr16q1.1,3.0:pr16q1.2,3.0:pr16q1.3,3.0:pr16q2,3.0:pr16q2.1,3.0:pr16q2.2,3.0:pr16q2.3,3.0:pr16q2.4,3.0:pr16q3,3.0:pr16q3.1,3.0:pr16q3.2,3.0:pr16q3.3,3.0:pr16q3.4,3.0:pr16q3.5,3.0:pr16q4,3.0:pr16q4.1,3.0:pr16q4.2,3.0:pr16q4.3,3.0:pr16q4.4,3.0:pr17q1,3.0:pr17q1.1,3.0:pr17q1.2,3.0:pr17q1.3,3.0:pr17q2,3.0:pr17q2.1,3.0:pr17q2.2,3.0:pr17q2.3,3.0:pr17q2.4,3.0:pr17q3,3.0:pr17q3.1,3.0:pr17q3.2,3.0:pr17q3.3,3.0:pr17q4,3.0:pr17q4.1,3.0:pr17q4.2,3.0:pr18q1,3.0:pr18q1.1,3.0:pr18q1.2,3.0:pr18q1.3,3.0:pr18q2,3.0:pr18q2.1,3.0:pr18q2.2,3.0:pr18q2.3,3.0:pr18q3,3.0:pr18q3.1,3.0:pr18q3.2,3.0:pr18q3.3,3.0:pr18q3.4,3.0:pr18q3.5,3.0:pr18q4,3.0:pr18q4.1,3.0:pr18q4.2,3.0:pr18q4.3,3.0:pr19q1,3.0:pr19q1.1,3.0:pr19q1.2