Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Martin Trigaux

#19626of 53,632
13.3Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2020-9207
4.3
2020-12-22
Odoo · Odoo Community · CVE-2019-11786
**Name of the Vulnerable Software and Affected Versions** Odoo Community versions 13.0 and earlier Odoo Enterprise versions 13.0 and earlier **Description** The issue is related to improper access control, allowing remote authenticated users to modify translated terms. This can lead to arbitrary content modification on translatable elements. **Recommendations** For Odoo Community versions 13.0 and earlier, update to a version later than 13.0 to resolve the issue. For Odoo Enterprise versions 13.0 and earlier, update to a version later than 13.0 to resolve the issue. As a temporary workaround, consider restricting access to the translation functionality until a patch is available.
PT-2019-9150
9.0
2019-04-09
Odoo · Odoo Enterprise · CVE-2018-15640
**Name of the Vulnerable Software and Affected Versions** Odoo Enterprise versions 10.0 through 12.0 **Description** The issue is related to improper access control in the Helpdesk App, allowing remote authenticated attackers to gain elevated privileges by sending a crafted request. **Recommendations** For Odoo Enterprise versions 10.0 through 12.0, update to a version that includes a fix for this issue to prevent exploitation.