Unrated severityNVD Advisory· Published Feb 25, 2025· Updated Feb 25, 2025

CVE-2024-36259

Description

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attackers to extract sensitive information via an oracle-based (yes/no response) crafted attack.

Affected products

Odcms/Odoo Enterprisev5
Range: master

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/odoo/odoo/issues/199330mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000