CVE-2018-15645

Name of the Vulnerable Software and Affected Versions: Odoo Community versions 12.0 and earlier Odoo Enterprise versions 12.0 and earlier

Description: The issue is related to improper access control in message routing, allowing remote authenticated users to create arbitrary records via crafted payloads. This may lead to privilege escalation.

Recommendations: For Odoo Community versions 12.0 and earlier, update to a version that includes the necessary security patches to fix the improper access control issue. For Odoo Enterprise versions 12.0 and earlier, update to a version that includes the necessary security patches to fix the improper access control issue. As a temporary workaround, consider restricting access to the message routing functionality to minimize the risk of exploitation.