Local File Disclosure Vulnerability in Odoo Community and Enterprise 15.0 and Earlier

Local File Disclosure Vulnerability in Odoo Community and Enterprise 15.0 and Earlier

CVE-2021-44476 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.

Learn more about our Cis Benchmark Audit For Server Software.