Romain E. Silva

**Name of the Vulnerable Software and Affected Versions** Odoo versions prior to 8.0-20160726 Odoo version 9 **Description** The issue allows for open redirection, which can be used to obtain sensitive information remotely. This is related to CWE-601. **Recommendations** For Odoo versions prior to 8.0-20160726, update to a version newer than 8.0-20160726 to resolve the issue. For Odoo version 9, there is no information about a newer version that contains a fix for this issue, consider restricting access to sensitive information as a temporary mitigation measure.