CVE-2021-44476

Published: Apr 25, 2023Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploitability: 2.3 / Impact: 4.0

Source: NVD

Description

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local files on the server, including sensitive configuration files.

Affected (2)

Products: Odoo: Odoo

Odoo

1 product

Odoo

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Odoo Odoo	Up to 15.0
Odoo Odoo	Up to 15.0

Related CWEs

CWE-267

Privilege Defined With Unsafe Actions

A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.

References (4)

https://github.com/odoo/odoo/issues/107684

Source: security@odoo.com

Issue TrackingPatchVendor Advisory

https://www.debian.org/security/2023/dsa-5399

Source: security@odoo.com

https://github.com/odoo/odoo/issues/107684

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

https://www.debian.org/security/2023/dsa-5399

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.