CVE-2024-36259CWE-284

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information…

High · published February 25, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-02-25T19:10Z
EPSS history
Timeline
  • 25 FEB 19:10Z
    Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information…
    cvelistv5