CVEvulnerability
CVE-2021-45111
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.0 ([email protected])
- 7.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Weaknesses
- CWE-284
Description
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
Affected configurations
• odoo odoo (<= 15.0)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://github.com/odoo/odoo/issues/107683 Issue Tracking, Patch, Vendor Advisory
- https://www.debian.org/security/2023/dsa-5399 www.debian.org
- https://github.com/odoo/odoo/issues/107683 Issue Tracking, Patch, Vendor Advisory
- https://www.debian.org/security/2023/dsa-5399 www.debian.org