CVE-2017-9416
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.
Published Jun 4, 2017 · updated Jun 16, 2026 · odoo odoo
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.
Timeline
Detection, updates, and resolution for this record.
Jun 4, 2017 · Catalog
Detected
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.
Jun 16, 2026 · Catalog
Updated
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.
Affected
- cpe odoo/odoo10.0
- cpe odoo/odoo8.0
- cpe odoo/odoo9.0
Sources
- CVE.orgCVE-2017-9416
Official CVE identifier
cve.org - NIST NVDCVE-2017-9416
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service.
nvd.nist.gov - Odoo SecurityCVE-2017-9416
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com