← Back to CVE List

CVE-2018-14886

Published: 2019-06-28T18:15Z
Last Modified: 2024-11-21T03:50Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privileged authenticated users to read local files via a crafted module description. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt