← CVE Intelligence

CVE-2018-15645

Odoo / Odoo Community PUBLISHED

Description (CNA)

Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrary records via crafted payloads, which may allow privilege escalation.

Affected (CNA)

Vendor / productVersions
Odoo / Odoo Communityaffected unspecified through 12.0
Odoo / Odoo Enterpriseaffected unspecified through 12.0

CWE

CWE-284

References

ADP enrichment

CVE

No English description supplied.