Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2xx6-c8x3-p4jj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

EPSS

Процентиль: 84%
0.0224
Низкий

Связанные уязвимости

CVSS3: 9.1
nvd
больше 6 лет назад

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

CVSS3: 9.1
debian
больше 6 лет назад

Improper sanitization of dynamic user expressions in Odoo Community 11 ...

EPSS

Процентиль: 84%
0.0224
Низкий