CVE-2021-23203 — Odoo / Odoo Community

CVE-2021-23203

Odoo / Odoo Community PUBLISHED

Description (CNA)

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests.

Affected (CNA)

Vendor / product	Versions
Odoo / Odoo Community	affected 14.0 through 15.0
Odoo / Odoo Enterprise	affected 14.0 through 15.0

CWE

CWE-284

References

https://github.com/odoo/odoo/issues/107695
https://www.debian.org/security/2023/dsa-5399

ADP enrichment

CVE

No English description supplied.

https://github.com/odoo/odoo/issues/107695
https://www.debian.org/security/2023/dsa-5399

CISA-ADP

No English description supplied.

No references supplied.