ALT-PU-2021-1048

Высокий

ALT-PU-2021-1048: package odoo update to version 14.0-alt1.20210112

Источник

errata.altlinux.org

Дата публикации

15.01.2021

Дата обновления

15.01.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades odoo to version 14.0-alt1.20210112.

Устраненные уязвимости10

CVE-2018-15631

Средний 6.5

Дата публикации: 09.04.2019

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.

CVSS 3.1

Средний 6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2018-15631 https://nvd.nist.gov/vuln/detail/CVE-2018-15631

Ссылки1

ALT-PU-2021-1048 https://errata.altlinux.org/ALT-PU-2021-1048

Связанные уязвимости

CVE-2018-15631

CVSS3: 6.5

nvd

больше 7 лет назад

CVE-2018-15631

CVSS3: 6.5

debian

больше 7 лет назад

Improper access control in the Discuss App of Odoo Community 12.0 and ...

GHSA-69pp-3rvf-3wvx

CVSS3: 6.5

github

больше 4 лет назад

CVE-2018-15635

CVSS3: 6.1

nvd

больше 7 лет назад

Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a crafted name.

CVE-2018-15635

CVSS3: 6.1

debian

больше 7 лет назад

Cross-site scripting vulnerability in the Discuss App of Odoo Communit ...