Improper access control

2019-04-0916:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.0%

JSON

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.

CPENameOperatorVersion
odoole12.0
odoole12.0

CPE	Name	Operator	Version
	odoo	le	12.0
	odoo	le	12.0

References

github.com/odoo/odoo/issues/32516

www.excellium-services.com/cert-xlm-advisory/cve-2018-15631/