Vulnerability in Odoo Community
CVE-2021-44460
Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to access the system with the deactivated account and any permission it still holds, via crafted RPC req…
EPSS: 0.006 (69.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Odoo Community — versions 0
- Odoo Enterprise — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2021-44460?
- CVE-2021-44460 is a high-severity vulnerability in Odoo Community, classified under Improper Access Control. CVSS score: 7.4/10. Published 2023-04-25.
- How severe is CVE-2021-44460?
- High severity. CVSS v3 base score is 7.4 out of 10.
- Is CVE-2021-44460 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.