Description
Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
Published: 2023-04-25
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-31298 Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
References
Link Providers
https://github.com/odoo/odoo/issues/107686 cve-icon cve-icon
History

Wed, 25 Feb 2026 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Odoo Odoo
cve-icon MITRE

Status: PUBLISHED

Assigner: odoo

Published:

Updated: 2024-08-04T04:25:16.399Z

Reserved: 2021-12-27T06:17:50.969Z

Link: CVE-2021-44461

cve-icon Vulnrichment

Updated: 2024-08-04T04:25:16.399Z

cve-icon NVD

Status : Modified

Published: 2023-04-25T19:15:09.670

Modified: 2024-11-21T06:31:01.323

Link: CVE-2021-44461

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses