Description

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leading to privilege escalation.

Remediation

References

CVE-2020-29396

Related Vulnerabilities

WordPress Plugin WordPress+Microsoft Office 365/Azure AD-LOGIN Unspecified Vulnerability (11.6)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33937)

WordPress Plugin MailArchiver Cross-Site Scripting (2.10.1)

Plone CMS Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2024-0669)

Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1611)

Severity

High

Classification

CVE-2020-29396 CWE-269 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities