CVE-2019-11781 — Improper Input Validation in Community

CWE-20 — Improper Input Validation3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.2%
top 52.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Odoo CommunityOdoo EnterpriseOdoo+1 more
Timeline
PublishedDec 22
Latest updateMay 24

Description

Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5odoo/odoo_communityunspecified — 12.0
▶CVEListV5odoo/odoo_enterpriseunspecified — 12.0
▶NVDodoo/odoo12.0
▶debiandebian/odoo

🔴Vulnerability Details

1
GHSA
GHSA-8qww-xfxc-2wmf: Improper input validation in portal component in Odoo Community 12↗2022-05-24
▶

📋Vendor Advisories

1
Debian
CVE-2019-11781: odoo - Improper input validation in portal component in Odoo Community 12.0 and earlier...↗2019
▶