CVE-2019-11786 MEDIUM

CVE-2019-11786

Vendor Odoo
Product Odoo Community
Weakness CWE-284
Published December 22, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements.

Key dates

02Disclosure timeline

December 22, 2020 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-26118 Flaw in ActiveMQ Artemis OpenWire support CVE-2025-14977 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure CVE-2019-10964 Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control CVE-2025-55741 unopim/unopim allows unauthorized product deletion via mass-delete endpoint CVE-2021-1243 Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability