CVE-2018-14887 - Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request

Back Back to CVE browser

MEDIUM

Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request

Published Jun 28, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 1.81%

Description

Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://github.com/odoo/odoo/commits/master
x_refsource_MISCThird Party Advisory
https://github.com/odoo/odoo/issues/32511
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Link	Providers	Tags
https://github.com/odoo/odoo/commits/master		x_refsource_MISCThird Party Advisory
https://github.com/odoo/odoo/issues/32511		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory