Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xx6-c8x3-p4jj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

EPSS

Процентиль: 81%
0.02211
Низкий

Связанные уязвимости

CVSS3: 9.1
nvd
около 7 лет назад

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

CVSS3: 9.1
debian
около 7 лет назад

Improper sanitization of dynamic user expressions in Odoo Community 11 ...

EPSS

Процентиль: 81%
0.02211
Низкий