CVE-2018-14864

Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote…

published July 3, 2019

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated users to inject arbitrary web script via a crafted attachment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01183 · 67.5th percentile
Published
2019-07-03T18:51Z
EPSS history
Timeline
  • 03 JUL 18:51Z
    Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote…
    cvelistv5