Sandboxing Vulnerability in Odoo by Odoo S.A.

CVE-2021-23166

What is CVE-2021-23166?

A sandboxing vulnerability present in Odoo Community and Enterprise versions up to 15.0 allows authenticated administrators to bypass file access restrictions. This could lead to unauthorized reading and writing of local files on the server, potentially compromising sensitive data. It is crucial for administrators to apply relevant patches and updates to mitigate this risk and secure their systems. For further details, refer to the Odoo GitHub issue and the Debian security advisory.

References