Back to directory
WRITEUP #1251

Odoo: Get your Content Type right, or else!

XSSSecurity code review
by@DBrinkrolf(Dennis Brinkrolf)
Program
Odoo
Published
Apr 24, 2023
Added to HackDex
Apr 28, 2023
Read Full Writeuphttps://www.sonarsource.com/blog/odoo-get-your-content-type-right-or-else/
RELATED WRITEUPS
Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
XSSReflected XSS
Front-End Frameworks: When Bypassing Built-in Sanitization Might Backfire
XSSClient-side Path Traversal
Government Emails at Risk: Critical Cross-Site Scripting Vulnerability in Roundcube Webmail
XSSSecurity code review
Studying 0days: How we hacked Anki, the world's most popular flashcard app
RCEComponents with known vulnerabilities
We hacked Anki - 0 day exploit from studying someone elses flashcards
RCEComponents with known vulnerabilities

Built with ❤️ by Shubham Rawat