Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rp8-hcmg-4f3f

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

EPSS

Процентиль: 43%
0.00208
Низкий

Дефекты

CWE-668
CWE-862

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 5 лет назад

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

CVSS3: 6.5
nvd
около 5 лет назад

Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.

CVSS3: 6.5
debian
около 5 лет назад

Improper access control in mail module (notifications) in Odoo Communi ...

EPSS

Процентиль: 43%
0.00208
Низкий

Дефекты

CWE-668
CWE-862