CVE-2021-44465: Medium severity odoo vulnerability
Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-44465.
What is the title of this vulnerability?
The title of this vulnerability is 'Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.'
What is the severity of CVE-2021-44465?
The severity of CVE-2021-44465 is medium (4.3).
Which versions of Odoo are affected by this vulnerability?
Odoo Community 13.0 and earlier, and Odoo Enterprise 13.0 and earlier are affected by this vulnerability.
How can an authenticated attacker exploit this vulnerability?
An authenticated attacker can exploit this vulnerability by crafting RPC requests to subscribe to receive future notifications and comments related to arbitrary business records in the system.