CVE-2019-11780

published 2019-12-19

CVE-2019-11780: Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to…

Priority P3 48 high 8.1 CVSS 3.1

AV N AC L PR L UI N S U C H I H A N

Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	odoo	—	—
odoo	odoo	—	—
odoo	odoo_community	—	—
odoo	odoo_enterprise	—	—

CVSS provenance

nvd v3.1 8.1 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

nvd v2.0 5.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:N

osv 8.1 HIGH

vendor_debian 8.1 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284