Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8r2-275f-f2p3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

EPSS

Процентиль: 43%
0.00206
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
около 5 лет назад

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

CVSS3: 5.4
nvd
около 5 лет назад

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

CVSS3: 5.4
debian
около 5 лет назад

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 ...

EPSS

Процентиль: 43%
0.00206
Низкий

Дефекты

CWE-79