CVE-2018-14865

Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote attackers to read local files...

CVE-2018-14865

Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote attackers to read local files...

CVE-2018-14865

The CVE-2018-14865 case concerns Odoo, specifically the Report engine in Odoo Community versions 9.0–11.0 and earlier and Odoo Enterprise versions 9.0–11.0 and earlier. The vulnerability stems from the Report engine not using secure options when passing documents to wkhtmltopdf, which can allow a...