Home

CVE-2017-10803

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.551

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Odoo 10.0Windows
Multiple Vulnerabilities are affected in Odoo 8.0Windows
Multiple Vulnerabilities are affected in Odoo 9.0Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234