| XML Entity Expansion in trytond and proteusCVE-2022-26662 · GHSA-PM3H-MM62-PWM8Version ranges need review. |
proteustryton |
PyPI |
High
|
Fix reported |
|
| Tryton vulnerable to arbitrary command executionCVE-2014-6633 · GHSA-M9JJ-5QVJ-5FHXVersion ranges need review. |
trytontrytond |
PyPI |
High
|
Fix reported |
|
| Improper Restriction of XML External Entity Reference in trytond and proteusCVE-2022-26661 · GHSA-CJ78-RGW3-4H5PVersion ranges need review. |
proteustryton |
PyPI |
Medium
|
Fix reported |
|
| trytond does not enforce access rights for the route of the HTML editor.CVE-2025-66423 · GHSA-P3P5-XRMV-4J6XVersion ranges need review. |
trytond |
PyPI |
High
|
Fix reported |
|
| trytond does not enforce access rights for data exportCVE-2025-66424 · GHSA-2W93-QWPP-VGVJVersion ranges need review. |
trytond |
PyPI |
Medium
|
Fix reported |
|
| trytond allows remote attackers to obtain sensitive trace-back (server setup) informationCVE-2025-66422 · GHSA-JQFC-9Q34-PRHGVersion ranges need review. |
trytond |
PyPI |
Medium
|
Fix reported |
|
| Tryton Directory Traversal vulnerabilityCVE-2013-4510 · GHSA-QJMC-WWMW-CQ9RVersion ranges need review. |
trytontrytond |
PyPI |
High
|
Fix reported |
|
| Tryton Information Disclosure VulnerabilityCVE-2017-0360 · GHSA-7CWG-2575-3546Version ranges need review. |
trytond |
PyPI |
Medium
|
Fix reported |
|
| Tryton Improper Access ControlCVE-2019-10868 · GHSA-F6F2-PWRJ-64H3Version ranges need review. |
trytond |
PyPI |
High
|
Fix reported |
|
| trytond Incorrect Authorization vulnerabilityCVE-2012-2238 · GHSA-JFGC-5VH4-8RH5Version ranges need review. |
trytond |
PyPI |
High
|
Fix reported |
|
| trytond arbitrary fields write via a sequence of recordsCVE-2015-0861 · GHSA-C8Q5-2J73-QVCCVersion ranges need review. |
trytond |
PyPI |
Medium
|
Fix reported |
|
| Trytond allows modification of privileges of arbitrary usersCVE-2012-0215 · GHSA-CQG4-RF29-3MV6Version ranges need review. |
trytond |
PyPI |
High
|
Fix reported |
|
| Tryton allows users to read the hashed passwordCVE-2016-1241 · GHSA-52J9-V3JC-9XGCVersion ranges need review. |
trytontrytond |
PyPI |
Medium
|
Fix reported |
|
| Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameterCVE-2016-1242 · GHSA-JPR7-8RXM-4VGXVersion ranges need review. |
trytontrytond |
PyPI |
Medium
|
Fix reported |
|
