Description
Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request.
Unscored
CVE-2018-14862
EUVD-2018-6744GHSA-c2pj-wg92-r762
Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authe…
Published Jul 3, 2019 · Updated Aug 5, 2024 · Assigned by mitre