VULNERABILITY INTELLIGENCE

CVE-2017-10803

CVSS score6.5 MEDIUM
EPSS probability3.59%
CISA KEVNot currently listed
Published2017-07-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.

Weakness classification

  • CWE-502: Deserialization of Untrusted Data

Primary references