CVE-2018-15631
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…
Published Apr 9, 2019 · updated Jun 16, 2026 · odoo odoo
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Timeline
Detection, updates, and resolution for this record.
Apr 9, 2019 · Catalog
Detected
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Jun 16, 2026 · Catalog
Updated
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Affected
- cpe odoo/odooversion unspecified
Sources
- NIST NVDCVE-2018-15631
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
nvd.nist.gov - Odoo SecurityCVE-2018-15631
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com