← CVE Intelligence

CVE-2018-15638

Odoo / Odoo Community PUBLISHED

Description (CNA)

Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names.

Affected (CNA)

Vendor / productVersions
Odoo / Odoo Communityaffected unspecified through 13.0
Odoo / Odoo Enterpriseaffected unspecified through 13.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.