| Package | Affected versions | Patched versions |
|---|---|---|
| odoo | ≤ 12.0 |
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free