Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2019-11783
PUBLISHED
More InfoOfficial Page
Assigner-odoo
Assigner Org ID-22c90092-d340-4fb8-a06e-f1193e012523
View Known Exploited Vulnerability (KEV) details
Published At-22 Dec, 2020 | 16:25
Updated At-04 Aug, 2024 | 23:03
Rejected At-
▼CVE Numbering Authority (CNA)

Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users to subscribe to arbitrary mail channels uninvited.

Affected Products
Vendor
Odoo
Product
Odoo Community
Versions
Affected
  • From unspecified through 14.0 (custom)
Vendor
Odoo
Product
Odoo Enterprise
Versions
Affected
  • From unspecified through 14.0 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-284CWE-284 Improper Access Control
Metrics
VersionBase scoreBase severityVector
3.06.5MEDIUM
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Nils Hamerlinck (Trobz)
Christopher Riis Bubeck Eriksen
Alexandre Diaz
"Raspina Net Pars Group"
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/odoo/odoo/issues/63708
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/odoo/odoo/issues/63708
x_refsource_MISC
x_transferred
Details not found