CVE-2021-23176

Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remot...

Original description

The description as published by the source.

Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"15.0.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-23176 odoo Fixed in: 14.0.0+dfsg.2-7+deb11u1
Ubuntu UBUNTU-CVE-2021-23176 odoo

References

advisory github.com
web debian.org
web nvd.nist.gov