UpHeron
All vulnerabilities

Servers and applications

CVE-2018-15645

Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrary records via crafted payloads, which may allow privilege escalation.

Severity
Medium 6.5
Published
22 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
OdooServers and applications · cpe:a:odoo:odoo
  • Every version up to 12.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-15645
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-15645