CVE-2019-11781
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into mo…
Published Dec 22, 2020 · updated Jun 17, 2026 · odoo odoo
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.
Timeline
Detection, updates, and resolution for this record.
Dec 22, 2020 · Catalog
Detected
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.
Jun 16, 2026 · Catalog
Updated
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.
Jun 17, 2026 · NIST NVD
Updated
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.
Affected
- cpe odoo/odooversion unspecified
Sources
- CVE.orgCVE-2019-11781
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-11781
30-day exploitation probability 2.1%
first.org - NIST NVDCVE-2019-11781
Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.
nvd.nist.gov - Odoo SecurityCVE-2019-11781
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com