CVE-2024-12368

Summary

CVE-2024-12368 is a new vulnerability affecting Odoo Community 15.0 and Enterprise 15.0. This issue is rooted in the auth_oauth module, which contains an access control flaw. An internal user can exploit this vulnerability to export the OAuth tokens of other users, posing a significant risk to data privacy and security. This unauthorized access could potentially lead to further unintended actions within the affected Odoo environments. It is crucial that users of these versions apply the necessary patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.