Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72cg-9pgw-xm8h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.

Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.

EPSS

Процентиль: 49%
0.00262
Низкий

Связанные уязвимости

CVSS3: 4.3
nvd
больше 6 лет назад

Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records that they do not own by making an RPC call before garbage collection occurs.

CVSS3: 4.3
debian
больше 6 лет назад

Incorrect access control in the TransientModel framework in Odoo Commu ...

EPSS

Процентиль: 49%
0.00262
Низкий