CVE-2018-15638

Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names.

Score

CVSS 3.0 7.1 High

Status

Modified - security@odoo.com

Published

2020-12-22

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Odoo (Odoo)
• Odoo Community (Odoo)
• Odoo Enterprise (Odoo)

References

• https://github.com/odoo/odoo/issues/63703