CVE-2018-15635
Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitr…
Published Apr 9, 2019 · updated Jun 17, 2026 · odoo odoo
Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a crafted name.
Timeline
Detection, updates, and resolution for this record.
Apr 9, 2019 · Catalog
Detected
Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a crafted name.
Jun 16, 2026 · Catalog
Updated
Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a crafted name.
Jun 17, 2026 · NIST NVD
Updated
Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a document with a crafted name.
Affected
- cpe odoo/odooversion unspecified
Sources
- CVE.orgCVE-2018-15635
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-15635
30-day exploitation probability 1.0%
first.org - NIST NVDCVE-2018-15635
Cross-site scripting vulnerability in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote attackers to inject arbitrary web script in the browser of an internal user of the system by tricking them into inviting a follower on a do
nvd.nist.gov - Odoo SecurityCVE-2018-15635
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com