CVE-2021-26947

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web...

Original description

The description as published by the source.

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"15.0.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-26947 odoo Fixed in: 14.0.0+dfsg.2-7+deb11u1
Ubuntu UBUNTU-CVE-2021-26947 odoo

References

advisory github.com
web debian.org
web nvd.nist.gov