[FD] SSD Advisory – Odoo CRM Code Execution

Hi, Link: http://ift.tt/2tyow2s Twitter: @SecuriTeam_SSD Vulnerability Summary The following advisory describe arbitrary Python code execution found in Odoo CRM version 10.0 Odoo is a suite of open source business apps that cover all your company needs: CRM, eCommerce, accounting, inventory, point of sale, project management, etc. Odoo’s unique value proposition is to be at the same time very easy to use and fully integrated. Credit An independent security researcher has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program. Vendor response Odoo has done a private disclosure for the issue we reported, and the patch was merged in all supported branches. The full public disclosure will be available at http://ift.tt/2toc2Jr. The full write-up is attached

Source: Gmail -> IFTTT-> Blogger