CVE-2019-11781

Name of the Vulnerable Software and Affected Versions Odoo Community versions prior to 13.0 Odoo Enterprise versions prior to 13.0

Description The issue is related to improper input validation in the portal component, allowing remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.

Recommendations For Odoo Community versions prior to 13.0, update to version 13.0 or later to resolve the issue. For Odoo Enterprise versions prior to 13.0, update to version 13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the portal component to minimize the risk of exploitation.