Odoo · Odoo Community · CVE-2021-44476
**Name of the Vulnerable Software and Affected Versions**
Odoo Community versions 15.0 and earlier
Odoo Enterprise versions 15.0 and earlier
**Description**
A sandboxing issue allows authenticated administrators to read local files on the server, including sensitive configuration files.
**Recommendations**
For Odoo Community versions 15.0 and earlier, update to a version later than 15.0 to resolve the issue.
For Odoo Enterprise versions 15.0 and earlier, update to a version later than 15.0 to resolve the issue.
As a temporary workaround, consider restricting access to sensitive configuration files on the server until a patch is available.