Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5fvm-8263-p85v

Опубликовано: 25 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

EPSS

Процентиль: 61%
0.00408
Низкий

7.5 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

CVSS3: 7.5
nvd
почти 3 года назад

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

CVSS3: 7.5
debian
почти 3 года назад

Improper access control in reporting engine of Odoo Community 14.0 thr ...

EPSS

Процентиль: 61%
0.00408
Низкий

7.5 High

CVSS3

Дефекты

CWE-284
CWE-863