CVE-2018-14887
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to…
Published Jun 28, 2019 · updated Jun 16, 2026 · odoo odoo
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Timeline
Detection, updates, and resolution for this record.
Jun 28, 2019 · Catalog
Detected
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Jun 16, 2026 · Catalog
Updated
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Affected
- cpe odoo/odoo10.0
- cpe odoo/odoo11.0
- cpe odoo/odoo9.0
Sources
- NIST NVDCVE-2018-14887
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
nvd.nist.gov - Odoo SecurityCVE-2018-14887
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com