CVE-2021-26947: XSS
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-26947?
CVE-2021-26947 is a cross-site scripting (XSS) vulnerability in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, which allows remote attackers to inject arbitrary web script via a crafted link.
How severe is the CVE-2021-26947 vulnerability?
The severity of CVE-2021-26947 is medium with a CVSS score of 6.1.
Which software versions are affected by CVE-2021-26947?
CVE-2021-26947 affects Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier.
How can remote attackers exploit CVE-2021-26947?
Remote attackers can exploit CVE-2021-26947 by injecting arbitrary web script in the browser of a victim through a crafted link.
Are there any fixes or patches available for CVE-2021-26947?
Yes, you can find fixes or patches for CVE-2021-26947 in the references provided: https://github.com/odoo/odoo/issues/107694, https://www.debian.org/security/2023/dsa-5399, https://github.com/odoo/odoo/commit/e451c4fbffa9472cd3686492e8ba41430ab3b235