Arbitrary Content Modification Vulnerability in Odoo Community and Enterprise 13.0 and Earlier

Arbitrary Content Modification Vulnerability in Odoo Community and Enterprise 13.0 and Earlier

CVE-2019-11786 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements.

Learn more about our User Device Pen Test.