Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:41542
HistoryJul 23, 2023 - 2:44 p.m.

Cross-site Scripting (XSS)

2023-07-2314:44:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
odoo
cross-site scripting
web script injection
security

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

42.3%

odoo is vulnerable to Cross-site scripting (XSS). The vulnerability allows a malicious attacker to inject arbitrary web script into a users browser by posting crafted content.

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

42.3%