Odoo CRM 10.0 - Code Execution

Odoo CRM 10.0 - Code Execution Vulnerability Summary The following advisory describe arbitrary Python code execution found in Odoo CRM version 10.0 Odoo is a suite of open source business apps that cover all your company needs: CRM, eCommerce, accounting, inventory, point of sale, project...

Odoo Directory Traversal Vulnerability

Odoo formerly known as OpenERP is an enterprise resource planning ERP and customer relationship management CRM system. The system is developed using Python language , PostgreSQL as the database , and includes modules such as sales management , inventory management , financial management , and...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

Directory traversal

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

CVE-2017-9416

Odoo 8.0/9.0/10.0 are vulnerable to Local File Inclusion via tools.file_open. The root cause is a directory traversal flaw that allows a remote authenticated user to read arbitrary files readable by the Odoo service. The nuclei template confirms the affected versions and impact (read arbitrary se...

CVE-2017-9416

Directory traversal vulnerability in tools.fileopen in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local files readable by the Odoo service...

PT-2017-18905

Name of the Vulnerable Software and Affected Versions Odoo versions 8.0 through 10.0 Description The issue allows remote authenticated users to read arbitrary local files readable by the Odoo service due to a directory traversal vulnerability in tools.file open. Recommendations For Odoo versions...