Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The module-description renderer in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier does not disable RST's local file inclusion, which allows privileged authenticated users to read local files via a crafted module description.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Odoo 权限许可和访问控制问题漏洞
Vulnerability Description
Odoo是比利时Odoo公司的一套开源商业系统。 Odoo 11.0及之前版本（社区版和企业版）中的module-description renderer存在安全漏洞。攻击者可利用该漏洞读取本地文件。
CVSS Information
N/A
Vulnerability Type
N/A