CVE-2021-23203

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to dow...

Original description

The description as published by the source.

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.0.1"},{"introduced":"15.0.0"},{"fixed":"15.0.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-23203 odoo Fixed in: 14.0.0+dfsg.2-7+deb11u1
Ubuntu UBUNTU-CVE-2021-23203 odoo

References

advisory github.com
web debian.org
web nvd.nist.gov