CVE-2021-44465

4.3

MEDIUMCVSS v3

Published

April 25, 2023

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

odoo

NPMNode.js client library for Odoo using JSON-RPC

<= 13.0NVD

saidimu/odoo

GitHubNode.js client library for Odoo using JSON-RPC

<= 13.0NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2021-44465

Description

More on this CVE