by Kastro
Paper/Archive/CVE-2021-44547

CVE-2021-44547

Odoo Odoo Community — A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leadin…

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 53.0.530 × 2010.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.

Affected

ProductAffectedFixed inSource
Odoo Community15.0–CNA
Odoo Enterprise15.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
odoo (CNA)8.7CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/odoo/odoo/issues/107696