CVE-2017-5871

EPSS 2.7%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 2.7%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

22 May 2019Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote).

Affected products

References