description: Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote authenticated users to modify translated terms, which may lead to arbitrary content modification on translatable elements.
problem types: CWE-284 Improper Access Control
affected:
{
product: Odoo Community
vendor: Odoo
versions:
lessThanOrEqual: 13.0, status: affected, version: unspecified, versionType: custom
}
{
product: Odoo Enterprise
vendor: Odoo
versions:
lessThanOrEqual: 13.0, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.0
]