CVE-2018-15631
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves ar…
Published: 2019-04-09 · CVSS: 6.5 · CVSS 3.0
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7