Sandboxing Issue in Odoo Community and Odoo Enterprise

CVE-2021-23186

What is CVE-2021-23186?

A critical sandboxing vulnerability exists in Odoo Community and Odoo Enterprise versions 15.0 and earlier, allowing authenticated administrators to improperly access and modify the database contents of other tenants within a multi-tenant environment. This flaw poses a significant threat to data integrity and confidentiality, undermining the security architecture designed to isolate tenant data.

References