VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2019-11785

CVE-2019-11785

Description

Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to obtain access to messages posted on business records there were not given access to, and subscribe to receive future messages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Odcms/Odoo2 versions
    cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*+ 1 more
    • cpe:2.3:a:odoo:odoo:*:*:*:*:community:*:*:*range: <=13.0
    • cpe:2.3:a:odoo:odoo:*:*:*:*:enterprise:*:*:*range: <=13.0
  • Odcms/Enterprisellm-create2 versions
    <=13.0+ 1 more
    • (no CPE)range: <=13.0
    • (no CPE)range: unspecified
  • Odcms/Communityllm-create
    Range: <=13.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.