Cross-Site Scripting in Odoo by Odoo S.A.

CVE-2018-15634

What is CVE-2018-15634?

A Cross-Site Scripting (XSS) vulnerability has been identified in Odoo, affecting both Odoo Community and Odoo Enterprise versions 14.0 and earlier. This flaw enables remote attackers to exploit attachment management features, allowing them to inject arbitrary web scripts into the browsers of unsuspecting users through specially crafted links. This can lead to unauthorized actions and theft of sensitive information. It is crucial for users to apply security measures to mitigate the risks associated with this vulnerability.

References