CVE-2019-11780
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access…
Published Dec 19, 2019 · updated Jun 17, 2026 · odoo odoo
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Timeline
Detection, updates, and resolution for this record.
Dec 19, 2019 · Catalog
Detected
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Jun 16, 2026 · Catalog
Updated
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Jun 17, 2026 · NIST NVD
Updated
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
Affected
- cpe odoo/odoo13.0
Sources
- CVE.orgCVE-2019-11780
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-11780
30-day exploitation probability 2.1%
first.org - NIST NVDCVE-2019-11780
Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
nvd.nist.gov - Odoo SecurityCVE-2019-11780
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com