Python · Python · CVE-2020-29396
**Name of the Vulnerable Software and Affected Versions**
Odoo Community versions 11.0 through 13.0
Odoo Enterprise versions 11.0 through 13.0
**Description**
A sandboxing issue, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation.
**Recommendations**
For Odoo Community versions 11.0 through 13.0, update to a version that includes a fix for this issue.
For Odoo Enterprise versions 11.0 through 13.0, update to a version that includes a fix for this issue.
As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.