CVE-2018-15638 - Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names

Published Dec 22, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.70%

Description

Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names.

Affected products

Vendor Odoo Product Odoo Community Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=13.0
Vendor Odoo Product Odoo Enterprise Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=13.0