pkg:Bitnami/odoo

All known vulnerabilities

• CRITICAL9.1CVE-2021-44547A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading…
  from 0, < 15.0.1
• HIGH8.8CVE-2024-12368Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAut…
  >= 15.0.0, < 15.0.20240510
• HIGH8.8CVE-2020-29396A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows…
  >= 11.0.0, < 13.0.1
• HIGH8.7CVE-2021-23186A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access an…
  from 0, < 15.0.1
• HIGH8.7CVE-2021-23166odoo - security update
  from 0, < 15.0.1
• HIGH8.1CVE-2021-45111Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigge…
  from 0, < 15.0.1
• HIGH7.5CVE-2021-23203Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attac…
  >= 14.0.0, < 14.0.1, >= 15.0.0, < 15.0.1
• HIGH7.5CVE-2021-23178Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payment…
  from 0, < 15.0.1
• MEDIUM6.8CVE-2021-44476A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read loca…
  from 0, < 15.0.1
• MEDIUM6.5CVE-2024-36259Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sen…
  >= 17.0.0, < 17.0.20240505
• MEDIUM6.5CVE-2021-44460Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to a…
  from 0, < 13.0.1
• MEDIUM6.5CVE-2021-23176Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier a…
  from 0, < 15.0.1
• MEDIUM6.1CVE-2021-44461Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control th…
  >= 13.0.0, < 15.0.1
• MEDIUM6.1CVE-2021-45071Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject ar…
  from 0, < 15.0.1
• MEDIUM6.1CVE-2021-44775Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote atta…
  from 0, < 15.0.1
• MEDIUM6.1CVE-2021-26947Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject ar…
  from 0, < 15.0.1
• MEDIUM6.1CVE-2021-26263Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote a…
  >= 14.0.0, < 14.0.1, >= 15.0.0, < 15.0.1
• MEDIUM4.3CVE-2021-44465Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe…
  from 0, < 13.0.1