CVE-2021-26263: XSS
Published Apr 25, 2023
·Updated
Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Affected Software
5 affected componentsFixes available
debian/odoo
14.0.0+dfsg.2-7+deb11u116.0.0+dfsg.2-1.1
Odoo=14.0
Odoo=14.0
Odoo=15.0
Odoo=15.0
Remediation
Patch Available
Event History
Apr 25, 2023
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26263?
The severity of CVE-2021-26263 is high.
2
How does CVE-2021-26263 affect Odoo Community?
CVE-2021-26263 affects Odoo Community versions 14.0 and 15.0.
3
How does CVE-2021-26263 affect Odoo Enterprise?
CVE-2021-26263 affects Odoo Enterprise versions 14.0 and 15.0.
4
What is the impact of CVE-2021-26263?
CVE-2021-26263 allows remote attackers to inject arbitrary web script in the browser of a victim through the Discuss app of Odoo.
5
How can I fix CVE-2021-26263?
To fix CVE-2021-26263, update to Odoo Community 16.0.0+dfsg.2-1.1 or apply the necessary security updates from Debian.