CVE-2021-23203

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to dow...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.0.1"},{"introduced":"15.0.0"},{"fixed":"15.0.1"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2021-23203 odoo Corrigé dans: 14.0.0+dfsg.2-7+deb11u1
Ubuntu UBUNTU-CVE-2021-23203 odoo

Références

advisory github.com
web debian.org
web nvd.nist.gov