Improper Access Control in Odoo Community and Enterprise Mail Module

CVE-2019-11784

What is CVE-2019-11784?

The Odoo mail module contains a flaw that permits improperly regulated access, enabling remote authenticated users to gain access to messages in conversations that they are not authorized to view. This can lead to the exposure of sensitive information and breaches of confidentiality within Odoo Community 14.0 and earlier, as well as Odoo Enterprise 14.0 and earlier versions.

References