medium6.5
CVE-2018-14887
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote att…
Impact
Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Odoo | Odoo | Versions 9.0, 10.0, 11.0 |