Karim Boukabbouz

The issue allows remote authenticated users to read arbitrary local files readable by the Odoo service due to a directory traversal vulnerability in `tools.file open`.