CVE-2024-12368: Odoo

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.

Affected products

• Odoo Odoo: version 15.0 only

Published 2025-02-25. Last modified 2026-06-17.