CVE-2021-23176
Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated u…
Published Apr 25, 2023 · updated Jun 16, 2026 · odoo odoo
Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets.
Timeline
Detection, updates, and resolution for this record.
Apr 25, 2023 · Catalog
Detected
Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets.
Jun 16, 2026 · Catalog
Updated
Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets.
Affected
- cpe odoo/odooversion unspecified
Sources
- NIST NVDCVE-2021-23176
Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets.
nvd.nist.gov - Odoo SecurityCVE-2021-23176
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com