CVE-2019-11786

MEDIUM

Odoo Community and Enterprise <= 13.0 - Authenticated Improper Access Control

Title source: llm
STIX 2.1

Description

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/odoo/odoo/issues/63711

Scores

CVSS v3 4.3
EPSS 0.0069
EPSS Percentile 48.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-284
Status published
Products (1)
odoo/odoo < 13.0 (2 CPE variants)
Published Dec 22, 2020
Tracked Since Feb 18, 2026