Odoo · Odoo · CVE-2017-5871
**Name of the Vulnerable Software and Affected Versions**
Odoo versions prior to 8.0-20160726
Odoo version 9
**Description**
The issue allows for open redirection, which can be used to obtain sensitive information remotely. This is related to CWE-601.
**Recommendations**
For Odoo versions prior to 8.0-20160726, update to a version newer than 8.0-20160726 to resolve the issue.
For Odoo version 9, there is no information about a newer version that contains a fix for this issue, consider restricting access to sensitive information as a temporary mitigation measure.