In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and... · CVE-2017-10803 · GitHub Advisory Database · GitHub

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and...

High severity Unreviewed Published May 13, 2022 to the GitHub Advisory Database • Updated Feb 2, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.

References

Published by the National Vulnerability Database

Jul 4, 2017

Published to the GitHub Advisory Database May 13, 2022

Last updated Feb 2, 2023