الباحثون
رجوع
Alexandre Diaz
#25271
من 60,593
10.8
إجمالي CVSS
الثغرات
·
2
متوسطة
2
PT-2020-9204
2020-12-22
6.5
CVE-2019-11783
Odoo
Odoo Community
The issue is related to improper access control in the mail module, specifically affecting channel partners. This allows remote authenticated users to subscribe to arbitrary mail channels without an invitation.
PT-2020-9207
2020-12-22
4.3
CVE-2019-11786
Odoo
Odoo Community
The issue is related to improper access control, allowing remote authenticated users to modify translated terms. This can lead to arbitrary content modification on translatable elements.