PatchTheCVEodoo vulnerabilities and fixes
Recent CVEs affecting odoo, with upgrade or downgrade steps. 2 tracked.
odoo has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-25. Highest priority: CVE-2024-36259 (score 49/100).
- CVE-2024-36259 HIGH 7.5 DOWNGRADE Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authentic
- CVE-2024-12368 HIGH 8.1 DOWNGRADE Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an int
FAQ
How do I fix odoo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is odoo being exploited right now?
None of the tracked odoo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which odoo CVE should I patch first?
CVE-2024-36259 currently ranks highest (49/100): Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authentic.