CVE catalog

CVE-2024-12368

DEBIAN-CVE-2024-12368

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.69% · Oct 25, 2026

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianodoo1114.0.0+dfsg.2-7vulnerable
Debianodoo1114.0.0+dfsg.2-7+deb11u1vulnerable
Debianodoo1114.0.0+dfsg.2-7+deb11u2vulnerable
Debianodoo1114.0.0+dfsg.3-1vulnerable
Debianodoo1114.0.0+dfsg.3-1.1vulnerable
Debianodoo1114.0.0+dfsg.3-1~bpo11+1vulnerable
Debianodoo1114.0.0+dfsg.3-1~bpo11+2vulnerable
Debianodoo1114.0.0+dfsg.3-1~bpo11+3vulnerable
Debianodoo1114.0.0+dfsg.4-1vulnerable
Debianodoo1116.0.0+dfsg.1-1vulnerable
Debianodoo1116.0.0+dfsg.1-1.1vulnerable
Debianodoo1116.0.0+dfsg.1-2vulnerable
Debianodoo1116.0.0+dfsg.1-3vulnerable
Debianodoo1116.0.0+dfsg.2-1vulnerable
Debianodoo1116.0.0+dfsg.2-1.1vulnerable
Debianodoo1116.0.0+dfsg.2-1~bpo12+1vulnerable
Debianodoo1116.0.0+dfsg.2-2vulnerable
Debianodoo1116.0.0+dfsg.2-2~bpo12+1vulnerable
Debianodoo1116.0.0+dfsg.2-3vulnerable
Debianodoo1116.0.0+dfsg.2-3~bpo12+1vulnerable
Debianodoo1117.0.0+dfsg-1vulnerable
Debianodoo1117.0.0+dfsg2-1vulnerable
Debianodoo1117.0.0+dfsg3-1vulnerable
Debianodoo1118.0.0+dfsg-1vulnerable
Debianodoo1118.0.0+dfsg-1.1vulnerable
Debianodoo1118.0.0+dfsg-2vulnerable
Debianodoo1119.0.0+dfsg-1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]