High
odoo — security advisory
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
- Products
- odoo
- Affected versions
- 14.0.0+dfsg.2-7, 14.0.0+dfsg.3-1, 16.0.0+dfsg.1-3, 16.0.0+dfsg.2-1.1, 16.0.0+dfsg.2-2, 18.0.0+dfsg-2, 18.0.0+dfsg-2build1, 19.0.0+dfsg-1
- Fixed versions
- Not specified
- CVEs
- CVE-2021-45111
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:35 UTC · Revision 1
Source evidence
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
osv:UBUNTU-CVE-2021-45111
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
Complete source record
{
"id": "7c0f0f8997b7bcb682bbbf6f3c1eb3fccef31297dbc5a1b1f218af7dab791d4d",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-45111",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2021-45111",
"summary": "Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.",
"evidence": "osv:UBUNTU-CVE-2021-45111",
"products": [
{
"name": {
"value": "odoo",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "14.0.0+dfsg.2-7",
"evidence": "/affected/0/versions"
},
{
"value": "14.0.0+dfsg.3-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "16.0.0+dfsg.1-3",
"evidence": "/affected/1/versions"
},
{
"value": "16.0.0+dfsg.2-1.1",
"evidence": "/affected/1/versions"
},
{
"value": "16.0.0+dfsg.2-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "18.0.0+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "18.0.0+dfsg-2build1",
"evidence": "/affected/3/versions"
},
{
"value": "19.0.0+dfsg-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "18.0.0+dfsg-2",
"evidence": "/affected/4/versions"
},
{
"value": "18.0.0+dfsg-2build1",
"evidence": "/affected/4/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2021-45111",
"aliases": [
"UBUNTU-CVE-2021-45111"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"14.0.0+dfsg.2-7",
"14.0.0+dfsg.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-45111.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-14",
"binary_version": "14.0.0+dfsg.3-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"16.0.0+dfsg.1-3",
"16.0.0+dfsg.2-1.1",
"16.0.0+dfsg.2-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-45111.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-16",
"binary_version": "16.0.0+dfsg.2-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"18.0.0+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-45111.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-18",
"binary_version": "18.0.0+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"18.0.0+dfsg-2build1",
"19.0.0+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-45111.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-19",
"binary_version": "19.0.0+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"18.0.0+dfsg-2",
"18.0.0+dfsg-2build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-45111.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-18",
"binary_version": "18.0.0+dfsg-2build1"
}
]
}
}
],
"modified": "2026-10-17T12:55:47.738714624Z",
"provider": "osv",
"upstream": [
"CVE-2021-45111"
],
"references": [
"https://ubuntu.com/security/CVE-2021-45111",
"https://github.com/odoo/odoo/issues/107683",
"https://www.cve.org/CVERecord?id=CVE-2021-45111"
]
},
"related_cves": [
{
"value": "CVE-2021-45111",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/1/score"
},
"source_id": "core-osv",
"document_id": 354096,
"published_at": "2023-04-25T19:15:00+00:00"
}