.. / CVE-2017-9416

Exploit for Odoo 8.0/9.0/10.0 - Local File Inclusion (CVE-2017-9416)

Description:

Odoo 8.0, 9.0, and 10.0 are susceptible to local file inclusion via tools.file_open. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Nuclei Template

View the template here CVE-2017-9416.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-9416.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2017-9416
https://github.com/odoo/odoo/issues/17394