CVE-2013-3617
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 21%
from disclosure to weapon0 days
Published on NVDNov 2
1st PoCOct 30
metasploitOct 30
exploitation probability
21%top 3% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The XML API in Openbravo ERP 2.5, 3.0, and earlier allows remote authenticated users to read arbitrary files via an XML document with an external entity declaration in conjunction with an entity reference to /ws/dal/ADUser or other /ws/dal/XXX interfaces, related to an XML External Entity (XXE) issue.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/38818unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.