Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-44465

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

Published

2023-04-25T19:15:09.727

Last Modified

2025-02-03T18:15:27.513

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-284
Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-863

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	odoo	odoo	≤ 13.0	Yes
Application	odoo	odoo	≤ 13.0	Yes

References

https://github.com/odoo/odoo/issues/107692 Issue Tracking, Patch, Vendor Advisory ([email protected])
https://github.com/odoo/odoo/issues/107692 Issue Tracking, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)