CVE-2018-14863

Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2019-07-03

Last modified

2024-08-05

Weaknesses

CWE-284

Affected products

• Odoo (Odoo)

References

• https://github.com/odoo/odoo/issues/32508