VULNERABILITY INTELLIGENCE
CVE-2019-11786
CVSS score4.3 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2020-12-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- security@odoo.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory