Threats tagged 'ghsa-hmxx-h27g-fgrq'

Odoo MCP versions 1.0.0 through 1.3.2 have an information disclosure vulnerability that allows clients to bypass field-level access controls. By invoking the execute_method tool, attackers can read restricted fields unredacted, exposing sensitive data. This vulnerability has a medium severity score of 5.3 and does not require user interaction or elevated privileges beyond limited privileges.