Описание
The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.
Ссылки
- MitigationThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- MitigationThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:odoo:odoo:8.0:*:*:*:community:*:*:*
cpe:2.3:a:odoo:odoo:8.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*
cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*
cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:odoo:odoo:11.0:*:*:*:community:*:*:*
cpe:2.3:a:odoo:odoo:11.0:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 83%
0.02212
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.5
debian
больше 7 лет назад
The Odoo Community Association (OCA) dbfilter_from_header module makes ...
CVSS3: 7.5
github
больше 4 лет назад
The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.
CVSS3: 9.8
altlinux
больше 7 лет назад
ALT-PU-2019-1740: package `odoo` update to version 12.0-alt1.20190424
EPSS
Процентиль: 83%
0.02212
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20