CoreCVE
Back

CRITICAL

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system

Published Jul 3, 2019

Description

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-78

OS Command Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 3, 2019
Updated Aug 5, 2024
Reserved Aug 2, 2018
Link CVE-2018-14860
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-14860
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-14860