Improper Access Control in Odoo Email Module Affects Odoo Community and Enterprise

CVE-2024-36259

What is CVE-2024-36259?

A vulnerability in the mail module of Odoo's Community and Enterprise versions allows remote authenticated attackers to exploit improper access control mechanisms. By executing a specially crafted oracle-based attack, these attackers can extract sensitive information from the affected systems. This security flaw highlights the need for stringent access controls in software documentation and implementation.

References