Medium severity6.5NVD Advisory· Published Jul 4, 2017· Updated Jun 17, 2026

CVE-2017-10803

Description

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Odcms/Odoo5 versions
cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*+ 4 more
- cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*
- cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*
- cpe:2.3:a:odoo:odoo:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*
- cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*
Odcms/Database Anonymization modulellm-create
Odcms/Odoo Communityllm-create
Odcms/Odoo Enterprisellm-create

cvss	0.423
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000

CVE-2017-10803

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions