CVE-2018-14862 | BDVDB-2026-118656 Detail

Description#

Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/odoo/odoo/issues/32504

Exploit#

No public exploit known

History#

Version 12019-07-03Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.