CVE-2018-14862

Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal…

published July 3, 2019

CVSS
—
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Published
2019-07-03T18:56Z
EPSS history
Timeline
  • 03 JUL 18:56Z
    Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal…
    cvelistv5