Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28832
HistoryDec 28, 2020 - 7:52 p.m.

Information Disclosure

2020-12-2819:52:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
odoo
mail module
information disclosure
vulnerability
access controls
remote authenticated users
arbitrary messages
conversations
restricted.

EPSS

0.001

Percentile

46.8%

odoo is vulnerable to information disclosure. Insecure access controls in mail module (notifications) allows remote authenticated users to obtain access to arbitrary messages in conversations that are otherwise restricted.

EPSS

0.001

Percentile

46.8%