Findings

CVE-2021-45111

Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstrat…

Published Apr 25, 2023 · updated Jun 16, 2026 · odoo odoo

Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 25, 2023 · Catalog

    Detected

    Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.

  2. Jun 16, 2026 · Catalog

    Updated

    Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.

Affected

  • cpe odoo/odooversion unspecified

Sources

  • NIST NVDCVE-2021-45111

    Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.

    nvd.nist.gov
  • Odoo SecurityCVE-2021-45111

    Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.

    github.com

References

CVE-2021-45111 · ZeroDay Findings