Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-69pp-3rvf-3wvx

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.

EPSS

Процентиль: 72%
0.01373
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
больше 7 лет назад

Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.

CVSS3: 6.5
debian
больше 7 лет назад

Improper access control in the Discuss App of Odoo Community 12.0 and ...

CVSS3: 8.8
altlinux
почти 6 лет назад

ALT-PU-2021-1048: package `odoo` update to version 14.0-alt1.20210112

EPSS

Процентиль: 72%
0.01373
Низкий

6.5 Medium

CVSS3