CVEvulnerability

CVE-2020-29396

8.8 HIGH Published 2020-12-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
9.9 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-267

Description

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation.

Affected configurations

• odoo odoo (>= 11.0 <= 13.0)

Related

Weakness · CWE (1)

  • CWE-267 Privilege Defined With Unsafe Actions weakness

References