Medium
odoo — security advisory
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
- Products
- odoo
- Affected versions
- 14.0.0+dfsg.2-7, 14.0.0+dfsg.3-1, 16.0.0+dfsg.1-3, 16.0.0+dfsg.2-1.1, 16.0.0+dfsg.2-2, 18.0.0+dfsg-2, 18.0.0+dfsg-2build1, 19.0.0+dfsg-1
- Fixed versions
- Not specified
- CVEs
- CVE-2021-44775
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:44 UTC · Revision 1
Source evidence
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
osv:UBUNTU-CVE-2021-44775
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
odoo
Fixed versions: Not specified
Complete source record
{
"id": "26ac3046e5d15a09323d8dcf33e172172ea889eafa56bb78d1c9336a629d262a",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-44775",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2021-44775",
"summary": "Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.",
"evidence": "osv:UBUNTU-CVE-2021-44775",
"products": [
{
"name": {
"value": "odoo",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "14.0.0+dfsg.2-7",
"evidence": "/affected/0/versions"
},
{
"value": "14.0.0+dfsg.3-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "16.0.0+dfsg.1-3",
"evidence": "/affected/1/versions"
},
{
"value": "16.0.0+dfsg.2-1.1",
"evidence": "/affected/1/versions"
},
{
"value": "16.0.0+dfsg.2-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "18.0.0+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "18.0.0+dfsg-2build1",
"evidence": "/affected/3/versions"
},
{
"value": "19.0.0+dfsg-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "odoo",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "18.0.0+dfsg-2",
"evidence": "/affected/4/versions"
},
{
"value": "18.0.0+dfsg-2build1",
"evidence": "/affected/4/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2021-44775",
"aliases": [
"UBUNTU-CVE-2021-44775"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"14.0.0+dfsg.2-7",
"14.0.0+dfsg.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-44775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-14",
"binary_version": "14.0.0+dfsg.3-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"16.0.0+dfsg.1-3",
"16.0.0+dfsg.2-1.1",
"16.0.0+dfsg.2-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-44775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-16",
"binary_version": "16.0.0+dfsg.2-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"18.0.0+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-44775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-18",
"binary_version": "18.0.0+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"18.0.0+dfsg-2build1",
"19.0.0+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-44775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-19",
"binary_version": "19.0.0+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "odoo",
"purl": "pkg:deb/ubuntu/odoo?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"18.0.0+dfsg-2",
"18.0.0+dfsg-2build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-44775.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "odoo-18",
"binary_version": "18.0.0+dfsg-2build1"
}
]
}
}
],
"modified": "2026-10-17T12:56:01.641847685Z",
"provider": "osv",
"upstream": [
"CVE-2021-44775"
],
"references": [
"https://ubuntu.com/security/CVE-2021-44775",
"https://github.com/odoo/odoo/issues/107691",
"https://www.cve.org/CVERecord?id=CVE-2021-44775"
]
},
"related_cves": [
{
"value": "CVE-2021-44775",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 354608,
"published_at": "2023-04-25T19:15:00+00:00"
}