Description

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation.

Remediation

References

CVE-2020-29396

Related Vulnerabilities

phpBB Improper Input Validation Vulnerability (CVE-2006-2220)

WordPress Plugin Menu Swapper Cross-Site Request Forgery (1.1.0.2)

Piwigo CVE-2014-4648 Vulnerability (CVE-2014-4648)

MySQL CVE-2014-2444 Vulnerability (CVE-2014-2444)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-1648)

Severity

High

Classification

CVE-2020-29396 CWE-269 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities