CVE-2021-44465 — Odoo / Odoo Community

CVE-2021-44465

Odoo / Odoo Community PUBLISHED

Description (CNA)

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

Affected (CNA)

Vendor / product	Versions
Odoo / Odoo Community	affected 0 through 13.0
Odoo / Odoo Enterprise	affected 0 through 13.0

CWE

CWE-284

References

https://github.com/odoo/odoo/issues/107692

ADP enrichment

CVE

No English description supplied.

https://github.com/odoo/odoo/issues/107692

CISA-ADP

No English description supplied.

No references supplied.