Skip to content
OpenAdvisories

Vendor

axelor

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence

    Axelor Open Platform versions 8.x prior to 8.2.2 contains an authorization bypass vulnerability that allows authenticated non-admin users to escalate privileges by exploiting unenforced field restrictions on nested relational save operations. Attackers can mo…