Threats tagged 'bit-odoo-2024-12368'

An improper access control vulnerability exists in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0. This flaw allows an internal user to export OAuth tokens belonging to other users. The vulnerability affects versions from 15.0.0 up to but not including 15.0.20240510. A patch is available to address this issue. No known exploits are reported in the wild.