What’s Vulnerable › Vulnerabilities
CVE-2017-10803
- Severity: medium (CVSS 6.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-07-04 · updated 2026-06-17
- Weakness: CWE-502
Description
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.
Affected products
- Odoo: 8.0, 9.0, 10.0
References
Get alerted when CVE-2017-10803 or the next vulnerability affects your stack