admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-14867.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

714 B
Raw Blame History

CVE-2018-14867

Description

Incorrect access control in the portal messaging system in Odoo Community 9.0 and 10.0 and Odoo Enterprise 9.0 and 10.0 allows remote attackers to post messages on behalf of customers, and to guess document attribute values, via crafted parameters.

POC

Reference

Github

No PoCs found on GitHub currently.