CVE-2018-15631: Medium severity odoo vulnerability
Published Apr 9, 2019
·Updated
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Affected Software
2 affected components
Odoo<=12.0
Odoo<=12.0
Remediation
Patch Available
Event History
Apr 9, 2019
CVE Published
via MITRE·03:41 PM
Data Sourced
via MITRE·03:41 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2018-15631.
2
What is the severity of CVE-2018-15631?
The severity of CVE-2018-15631 is medium with a severity value of 6.5.
3
What is affected by CVE-2018-15631?
Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier are affected by CVE-2018-15631.
4
How can remote authenticated attackers exploit CVE-2018-15631?
Remote authenticated attackers can e-mail themselves arbitrary files from the database via a crafted RPC request.
5
Is there a fix available for CVE-2018-15631?
Yes, a fix is available for CVE-2018-15631. Users should update to a version that includes the fix.