First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-52367

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.0
Huawei	EMUI	13.0.0; 12.0.0
huawei	harmonyos	2.0.0; 2.1.0; 3.0.0; 3.1.0; 4.0.0
huawei	emui	12.0.0; 13.0.0

References

Timeline

Published: Feb 18, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-523685.3Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormall CVE-2023-523699.1Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.CVE-2023-52375.4The Memberlite Shortcodes WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them CVE-2023-523709.8Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file ac CVE-2023-523713.5Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability.CVE-2023-523727.5Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.CVE-2023-523737.5Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauth CVE-2023-523747.5Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confident CVE-2023-523757.5Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability.CVE-2023-523767.5Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-523777.4Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bo CVE-2023-523789.8Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause feature

CVE-2023-52367: High severity, CVSS 7.7 | Vulnix