CVE-2017-10803 | BDVDB-2026-87103 Detail

Description#

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/odoo/odoo/issues/17898

Exploit#

No public exploit known

History#

Version 12017-07-04Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.