Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hvpc-5783-4997

Опубликовано: 25 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

EPSS

Процентиль: 63%
0.00441
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 3 года назад

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

CVSS3: 4.3
nvd
почти 3 года назад

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

CVSS3: 4.3
debian
почти 3 года назад

Improper access control in Odoo Community 13.0 and earlier and Odoo En ...

EPSS

Процентиль: 63%
0.00441
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-284
CWE-863