Sandboxing Vulnerability in Odoo Products by Odoo S.A.

CVE-2021-44476

What is CVE-2021-44476?

A sandboxing flaw in Odoo's software allows authenticated administrators to bypass security measures and access local files on the server. This includes sensitive configuration files, posing a significant risk to data integrity and confidentiality. Affected versions include both Odoo Community and Odoo Enterprise 15.0 and earlier, underscoring the need for immediate updates to mitigate potential exposure.

References