CVE-2021-44460
CVSS Score
7.4
EPSS Score
0.0%
EPSS Percentile
0th
Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests.
| CWE | CWE-284 |
| Vendor | odoo |
| Product | odoo community |
| Published | Apr 25, 2023 |
| Last Updated | Aug 4, 2024 |
Stay Ahead of the Next One
Get instant alerts for odoo odoo community
Be the first to know when new high vulnerabilities affecting odoo odoo community are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Versions
Odoo / Odoo Community
0 ≤ 13.0
Odoo / Odoo Enterprise
0 ≤ 13.0
Credits
Xavier Morel