CVE-2021-44460

6.5 mediumEPSS 0.7%

Medium (6.5) in odoo odoo. EPSS 0.7% chance of exploitation in the next 30 days.

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC requests.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2023-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

odoo:odoo

References

https://github.com/odoo/odoo/issues/107685
https://github.com/odoo/odoo/issues/107685

Check your stack JSON