Description

Odoo is vulnerable to an XSS vulnerability (cross-site scripting) due to an incorrect content type set on an API endpoint.

Remediation

Upgrade to the latest version of Odoo

References

Get Your Content Type Right or Else

Related Vulnerabilities

Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5306)

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16510)

MySQL CVE-2020-2573 Vulnerability (CVE-2020-2573)

TYPO3 Improper Input Validation Vulnerability (CVE-2010-5099)

Citrix Gateway Open Redirect and XSS

Severity

Medium

Classification

CVE-2023-1434 CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:L

Tags

XSS Known Vulnerabilities