CVE-2021-26263

Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"14.0.0"},{"fixed":"14.0.1"},{"introduced":"15.0.0"},{"fixed":"15.0.1"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2021-26263 odoo Corrigé dans: 14.0.0+dfsg.2-7+deb11u1
Ubuntu UBUNTU-CVE-2021-26263 odoo

Références

advisory github.com
web debian.org
web nvd.nist.gov