CVE-2021-26263

Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to...

Original description

The description as published by the source.

Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.0.1"},{"introduced":"15.0.0"},{"fixed":"15.0.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-26263 odoo Fixed in: 14.0.0+dfsg.2-7+deb11u1
Ubuntu UBUNTU-CVE-2021-26263 odoo

References

advisory github.com
web debian.org
web nvd.nist.gov