CVE-2018-15633

Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted attachment filenames.

Score

CVSS 3.0 7.1 High

Status

Modified - security@odoo.com

Published

2020-12-22

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Odoo (Odoo)
• Odoo Community (Odoo)
• Odoo Enterprise (Odoo)

References

• https://github.com/odoo/odoo/issues/63701