1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf

PoC

Odoo ≤17 is vulnerable to CVE-2024-4367, allowing arbitrary JavaScript execution via PDF.js.

view exploit source poc_in_githubauthor 1337rokudenashipublished 2025-08-25catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-4367US	high8.8	70.7% (99th)	Exploit	2024-05-14
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ES…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.