CVE-2018-14863

creationtimestamp| type| source ---|---|--- 2019-07-04 17:59:54+00:00| seen| https://t.me/cveNotify/180 2019-07-05 17:00:08+00:00| seen| https://t.me/cveNotify/236...

CVE-2018-14863

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC...

CVE-2018-14863

CVE-2018-14863 involves improper access control in the RPC framework of Odoo. Affected products include Odoo Community 8.0–11.0 and Odoo Enterprise 9.0–11.0. The underlying issue allows authenticated users to call private functions via RPC, constituting a privilege escalation vulnerability. Publi...