← Back

CVE-2017-10803

nvd nist
Published: Jul 4, 2017Modified: May 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Exploitability: 0.6 / Impact: 5.9
Source: NVD

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.

Affected (5)

Products: Odoo: Odoo
Odoo
1 product
Odoo
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Odoo
Odoo
Version 10.0
Odoo
Version 10.0
Odoo
Version 8.0
Odoo
Version 9.0
Odoo
Version 9.0

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.