CVE-2019-11785 in CommunityИнформация

Сводка

по MITRE • 23.12.2020

Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain access to messages posted on business records there were not given access to, and subscribe to receive future messages.

Be aware that VulDB is the high quality source for vulnerability data.

Раскрытие

23.12.2020

Модерация

принято

Вход

VDB-166685

EPSS

0.01470

KEV

Нет

Деятельности

Очень низкий

Источники

Do you need the next level of professionalism?

Upgrade your account now!