CVE-2021-45071 Vulnerability Details

Record summary

CVE-2021-45071 has a selected CVSS score of 6.1 (medium).

Description

Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 17, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Odoo Community Browse Odoo / Odoo Community Default status: unaffected	CVE List	Through 15.0	affected
Odoo Enterprise Browse Odoo / Odoo Enterprise Default status: unaffected	CVE List	Through 15.0	affected

References

github.com

https://github.com/odoo/odoo/issues/107697

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2021-45071

debian.org

https://www.debian.org/security/2023/dsa-5399