Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-44465

Опубликовано: 25 апр. 2023
Источник: nvd
CVSS3: 5.3
CVSS3: 4.3
EPSS Низкий

Описание

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*
Версия до 13.0 (включая)
cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*
Версия до 13.0 (включая)

EPSS

Процентиль: 57%
0.00352
Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-284
NVD-CWE-noinfo
CWE-863

Связанные уязвимости

ubuntu логотип

CVE-2021-44465

CVSS3: 4.3
ubuntu
почти 3 года назад

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

debian логотип

CVE-2021-44465

CVSS3: 4.3
debian
почти 3 года назад

Improper access control in Odoo Community 13.0 and earlier and Odoo En ...

github логотип

GHSA-hvpc-5783-4997

CVSS3: 5.3
github
почти 3 года назад

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

EPSS

Процентиль: 57%
0.00352
Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-284
NVD-CWE-noinfo
CWE-863