Findings

CVE-2018-14733

The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under c…

Published Jul 5, 2019 · updated Jun 16, 2026 · odoo odoo

The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 5, 2019 · Catalog

    Detected

    The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

  2. Jun 16, 2026 · Catalog

    Updated

    The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

Affected

  • cpe odoo/odoo10.0
  • cpe odoo/odoo11.0
  • cpe odoo/odoo8.0
  • cpe odoo/odoo9.0

Sources

  • NIST NVDCVE-2018-14733

    The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

    nvd.nist.gov
  • Odoo SecurityCVE-2018-14733

    Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.

    github.com

References

CVE-2018-14733 · ZeroDay Findings