CVE-2024-36259
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based…
Published: 2025-02-25 · CVSS: 7.5 · CVSS 3.1
Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7