CVE-2021-23166

Опубликовано: 25 апр. 2023

Источник: nvd

CVSS3: 8.7

EPSS Низкий

Описание

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.

Ссылки

https://github.com/odoo/odoo/issues/107687
Issue Tracking
Patch
Vendor Advisory
https://www.debian.org/security/2023/dsa-5399
https://github.com/odoo/odoo/issues/107687
Issue Tracking
Patch
Vendor Advisory
https://www.debian.org/security/2023/dsa-5399

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*

Версия до 15.0 (включая)

cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*

Версия до 15.0 (включая)

EPSS

Процентиль: 62%

0.00422

Низкий

8.7 High

CVSS3

8.7 High

CVSS3

Дефекты

CWE-267

NVD-CWE-noinfo

CWE-276

Связанные уязвимости

CVE-2021-23166

CVSS3: 8.7

ubuntu

почти 3 года назад

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.

CVE-2021-23166

CVSS3: 8.7

debian

почти 3 года назад

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterpr ...

GHSA-7pm2-436m-jff6

CVSS3: 8.7

github

почти 3 года назад

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.

EPSS

Процентиль: 62%

0.00422

Низкий

8.7 High

CVSS3

8.7 High

CVSS3

Дефекты

CWE-267

NVD-CWE-noinfo

CWE-276