CVE-2021-44460

6.5

MEDIUMCVSS v3

Published

April 25, 2023

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests.

odoo

NPMNode.js client library for Odoo using JSON-RPC

<= 13.0NVD

saidimu/odoo

GitHubNode.js client library for Odoo using JSON-RPC

<= 13.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2021-44460

Description

More on this CVE