CVE-2024-36259

Published: 2025-02-25T19:15Z

Last Modified: 2025-02-28T13:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt