| Package | Affected versions | Patched versions |
|---|---|---|
| odoo | ≤ 15.0 |
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another user, causing the victim's payment method to be charged instead.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free