CVE-2024-36259

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive info...

Original description

The description as published by the source.

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami odoo

[{"type":"SEMVER","events":[{"introduced":"17.0.0"},{"fixed":"17.0.20240505"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2024-36259 odoo

References

advisory github.com
web nvd.nist.gov