Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
References
| Link | Resource |
|---|---|
| https://github.com/odoo/odoo/issues/107686 | Issue Tracking Vendor Advisory |
Configurations
History
02 May 2023, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/odoo/odoo/issues/107686 - Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:* | |
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
25 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-25 19:15
Updated : 2024-07-15 02:15
NVD link : CVE-2021-44461
Mitre link : CVE-2021-44461
CVE.ORG link : CVE-2021-44461
JSON object : View
Products Affected
odoo
- odoo
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')