CVE-2021-45111

Published: Apr 25, 2023Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.

Affected (2)

Products: Odoo: Odoo

Odoo

1 product

Odoo

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Odoo Odoo	Up to 15.0
Odoo Odoo	Up to 15.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

https://github.com/odoo/odoo/issues/107683

Source: security@odoo.com

Issue TrackingPatchVendor Advisory

https://www.debian.org/security/2023/dsa-5399

Source: security@odoo.com

https://github.com/odoo/odoo/issues/107683

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

https://www.debian.org/security/2023/dsa-5399

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.