CVE-2024-12368
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Published Feb 25, 2025 · updated Jun 16, 2026 · odoo odoo
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Timeline
Detection, updates, and resolution for this record.
Feb 25, 2025 · Catalog
Detected
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Jun 16, 2026 · Catalog
Updated
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
Affected
- cpe odoo/odoo15.0
Sources
- NIST NVDCVE-2024-12368
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.
nvd.nist.gov - Odoo SecurityCVE-2024-12368
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com