Описание
The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.
The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2018-14733
- https://github.com/OCA/server-tools/issues/1335
- https://github.com/OCA/server-tools/tree/10.0/dbfilter_from_header
- https://github.com/OCA/server-tools/tree/11.0/dbfilter_from_header
- https://github.com/OCA/server-tools/tree/8.0/dbfilter_from_header
- https://github.com/OCA/server-tools/tree/9.0/dbfilter_from_header
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.
CVSS3: 7.5
debian
больше 7 лет назад
The Odoo Community Association (OCA) dbfilter_from_header module makes ...
CVSS3: 9.8
altlinux
больше 7 лет назад
ALT-PU-2019-1740: package `odoo` update to version 12.0-alt1.20190424