Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8r2-275f-f2p3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

EPSS

Процентиль: 54%
0.0071
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 6 лет назад

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

CVSS3: 5.4
nvd
почти 6 лет назад

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event attributes.

CVSS3: 5.4
debian
почти 6 лет назад

Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 ...

CVSS3: 9.1
altlinux
около 3 лет назад

ALT-PU-2023-6595: package `odoo` update to version 16.0-alt1.20231013

EPSS

Процентиль: 54%
0.0071
Низкий

Дефекты

CWE-79