CVE-2021-23166

High

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and…

odoo·CWE-267·Published 2023-04-25

CVSS

8.7

EPSS

0.01

KEV

Exploits

cve.orgen

171 chars

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.

NVDen

171 chars

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	8.7	—	—	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
3.0	Primary	cve.org	8.7	—	—	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N