Improper Access Control in Odoo Community and Enterprise Framework

CVE-2019-11780

What is CVE-2019-11780?

Improper access control within the computed fields system of Odoo Community 13.0 and Odoo Enterprise 13.0 enables remote authenticated attackers to exploit this vulnerability through crafted RPC requests. This flaw can lead to unauthorized access to sensitive information, potentially allowing attackers to escalate their privileges within the system.

References