CVE-2021-44465

4.3 mediumEPSS 0.5%

Medium (4.3) in odoo odoo. EPSS 0.5% chance of exploitation in the next 30 days.

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe to receive future notifications and comments related to arbitrary business records in the system, via crafted RPC requests.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs: CWE-284, CWE-863
Published: 2023-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

odoo:odoo

References

https://github.com/odoo/odoo/issues/107692
https://github.com/odoo/odoo/issues/107692

Check your stack JSON