Odoo · Odoo Enterprise · CVE-2021-45071
**Name of the Vulnerable Software and Affected Versions**
Odoo Community versions 15.0 and earlier
Odoo Enterprise versions 15.0 and earlier
**Description**
The issue allows remote attackers to inject arbitrary web script in the browser of a victim via crafted uploaded file names. This is a cross-site scripting (XSS) issue.
**Recommendations**
For Odoo Community versions 15.0 and earlier, update to a version later than 15.0 to resolve the issue.
For Odoo Enterprise versions 15.0 and earlier, update to a version later than 15.0 to resolve the issue.
As a temporary workaround, consider restricting the upload of files to minimize the risk of exploitation.