Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
References
| Link | Resource |
|---|---|
| https://github.com/odoo/odoo/issues/107691 | Issue Tracking Patch Vendor Advisory |
| https://www.debian.org/security/2023/dsa-5399 |
Configurations
Configuration 1 (hide)
|
History
05 May 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 May 2023, 20:26
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| References | (MISC) https://github.com/odoo/odoo/issues/107691 - Issue Tracking, Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:* cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:* |
|
| First Time |
Odoo
Odoo odoo |
|
| CWE | CWE-79 |
25 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-25 19:15
Updated : 2023-12-10 15:01
NVD link : CVE-2021-44775
Mitre link : CVE-2021-44775
CVE.ORG link : CVE-2021-44775
JSON object : View
Products Affected
odoo
- odoo
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')