Improper Access Control in Odoo Reporting Engine

CVE-2021-23203

What is CVE-2021-23203?

The reporting engine in Odoo Community versions 14.0 and 15.0, as well as Odoo Enterprise versions 14.0 and 15.0, is susceptible to a flaw that allows unauthorized remote attackers to manipulate crafted requests and gain access to PDF reports for various documents. This vulnerability poses significant risks by potentially exposing sensitive information to malicious actors.

References