| Package | Affected versions | Patched versions |
|---|---|---|
| odoo | = 10.0= 11.0 |
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free