CVE-2019-11780
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access…
Published Dec 19, 2019 · updated Jun 16, 2026 · odoo odoo
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Timeline
Detection, updates, and resolution for this record.
Dec 19, 2019 · Catalog
Detected
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Jun 16, 2026 · Catalog
Updated
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Affected
- cpe odoo/odoo13.0
Sources
- NIST NVDCVE-2019-11780
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
nvd.nist.gov - Odoo SecurityCVE-2019-11780
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com