CVE-2024-36259

7.5

HIGHCVSS v3

Published

February 25, 2025

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.

Odoo

NuGet GalleryPackage Description

= 17.0NVD

odoo

NPMNode.js client library for Odoo using JSON-RPC

= 17.0NVD

odoo

Docker Hub

More on this CVE

NVD↗GitHub Advisory↗

Odoo (formerly known as OpenERP) is a suite of open-source business apps.

= 17.0NVD

saidimu/odoo

GitHubNode.js client library for Odoo using JSON-RPC

= 17.0NVD

Security Advisories

CVE-2024-36259

Description

More on this CVE