Access Control Flaw in Odoo Community and Enterprise Versions

CVE-2019-11782

What is CVE-2019-11782?

An improper access control vulnerability exists in both Odoo Community and Odoo Enterprise versions prior to 14.0. This flaw permits remote authenticated users who have access to the contact management feature to manipulate user accounts. As a result, this can lead to unauthorized privilege escalation, allowing users to gain elevated rights and access sensitive functionalities in the system.

References