الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Swapnesh Shah

#11459من 60,593
28إجمالي CVSS
الثغرات · 4
متوسطة
2
عالية
2
PT-2023-12547
2021-01-15
5.3
CVE-2021-44465
Odoo
Odoo Enterprise
The issue allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system via crafted RPC requests. This is due to improper access control in the affected versions of Odoo Community and Odoo Enterprise.
PT-2019-4511
2019-11-19
8.1
CVE-2019-11780
Odoo
Odoo Enterprise
The issue is related to improper access control in the computed fields system of the Odoo framework, allowing remote authenticated attackers to access sensitive information via crafted RPC requests. This could lead to privilege escalation. The vulnerability is also associated with errors in processing unsaved computed fields on behalf of the superuser, which can be exploited by a remote attacker to elevate their privileges in the target system by sending specially crafted RPC requests.
PT-2019-9057
2019-04-26
8.1
CVE-2018-14859
Odoo
Odoo Enterprise
The issue is related to incorrect access control in the password reset component, allowing authenticated users to reset the password of other users by being the first party to use the secure token.
PT-2019-9059
2019-04-26
6.5
CVE-2018-14861
Odoo
Odoo Enterprise
The issue is related to improper data access control, allowing authenticated users to export secure hashed passwords of other users via a CSV export.