CVE-2017-10804

CVE-2017-10804 affects Odoo 8.0, Odoo Community Edition 9.0/10.0, and Odoo Enterprise Edition 9.0/10.0. The root cause is that parameters containing 0x00 characters are truncated before reaching the database layer due to using Psycopg 2.x before 2.6.3. This enables remote attackers to bypass auth...