CVE-2017-5871

Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information (remote).

CVSS v3.0

5.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

2.68% chance of exploitation in the next 30 days, 85th percentile

Nuclei

medium · CWE-601

Published

2019-05-22

Updated

2024-08-05

Proof-of-concept exploits (2)

• 1337rokudenashi/CVE-2017-58712★ · 2025-09-19
• 1337rokudenashi/Odoo-leq-8.0-20160726-and-9.0-Open-Redirect2★ · 2025-09-19

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5871.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-4367
• CVE-2017-5870
• CVE-2017-5875
• CVE-2017-5869
• CVE-2017-5876
• CVE-2017-5868