Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-23203
HistoryApr 25, 2023 - 7:15 p.m.

Improper access control

2023-04-2519:15:00
PRIOn knowledge base
www.prio-n.com
2
improper access control
reporting engine
pdf reports
remote attackers
crafted requests

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

CPENameOperatorVersion
odooeq14.0
odooeq14.0
odooeq15.0
odooeq15.0

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%