VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 28, 2019· Updated Jun 17, 2026

CVE-2018-14887

CVE-2018-14887

Description

Improper Host header sanitization in the dbfilter routing component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows a remote attacker to deny access to the service and to disclose database names via a crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Odcms/Odoo6 versions
    cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*+ 5 more
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:10.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:11.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:odoo:odoo:9.0:*:*:*:community:*:*:*
    • cpe:2.3:a:odoo:odoo:9.0:*:*:*:enterprise:*:*:*
  • Odoo/Odoo Communitydescription
  • Odcms/Enterprisellm-create
    Range: <=11.0
  • Odcms/Communityllm-create
    Range: <=11.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.