CVE-2018-14733

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.21%

Published

Jul 5, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression denial of service) under certain circumstances.

Weaknesses (CWE)

CWE-20

Affected Products (8)

odoo · odoovulnerable

References (10)

https://github.com/OCA/server-tools/issues/1335

MitigationThird Party Advisory

https://github.com/OCA/server-tools/tree/10.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/tree/11.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/tree/8.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/tree/9.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/issues/1335

MitigationThird Party Advisory

https://github.com/OCA/server-tools/tree/10.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/tree/11.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/tree/8.0/dbfilter_from_header

Third Party Advisory

https://github.com/OCA/server-tools/tree/9.0/dbfilter_from_header

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs