CVE-2021-45071: XSS
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-45071?
CVE-2021-45071 is a cross-site scripting (XSS) vulnerability in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier.
How does CVE-2021-45071 work?
CVE-2021-45071 allows remote attackers to inject arbitrary web script into the victim's browser through crafted uploaded file names.
What is the severity of CVE-2021-45071?
CVE-2021-45071 has a severity rating of 6.1 (medium).
How can I fix CVE-2021-45071?
To fix CVE-2021-45071, update to Odoo version 14.0.0 or 16.0.0 or apply the appropriate security update provided by Debian.
Are there any references for CVE-2021-45071?
Yes, you can find more information about CVE-2021-45071 at the following references: [GitHub Issue](https://github.com/odoo/odoo/issues/107697), [Debian Security Advisory](https://www.debian.org/security/2023/dsa-5399), [GitHub Commit](https://github.com/odoo/odoo/commit/609b6503af97af5cf00ff497760f71cd71860c48).