CVE-2021-44465

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive...

Original description

The description as published by the source.

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"13.0.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2021-44465 odoo

References

advisory github.com
web nvd.nist.gov