CVE-2021-23178
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that…
Published: 2023-04-25 · CVSS: 7.5 · CVSS 3.0
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another user, causing the victim's payment method to be charged instead.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7