Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Odoo XSS (CVE-2023-1434) - Vulnerability Database

Odoo XSS (CVE-2023-1434)

Description

Odoo is vulnerable to an XSS vulnerability (cross-site scripting) due to an incorrect content type set on an API endpoint.

Remediation

Upgrade to the latest version of Odoo

References

Get Your Content Type Right or Else

Related Vulnerabilities

Zimbra Collaboration XSS (CVE-2022-27926) Medium
Common tags: XSS Known Vulnerabilities
BeyondTrust Secure Remote Access Base XSS (CVE-2021-31589) Medium
Common tags: XSS Known Vulnerabilities
WSO2 Management Console XSS (CVE-2022-29548) Medium
Common tags: XSS Known Vulnerabilities
LISTSERV XSS (CVE-2022-39195) Medium
Common tags: XSS Known Vulnerabilities
cPanel XSS (CVE-2023-29489) Medium
Common tags: XSS Known Vulnerabilities

Severity

Medium

Classification

CVE-2023-1434
CWE-79
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:L

Tags

XSS
Known Vulnerabilities