Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tryton tryton vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv2
CVE-2017-0360
file_open in Tryton 3.x and 4.x up to and including 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.
Tryton Tryton 3.2.8Tryton Tryton 3.4.17Tryton Tryton 3.8.14Tryton Tryton 3.8.13Tryton Tryton 3.4.4Tryton Tryton 3.2.9Tryton Tryton 3.2.16Tryton Tryton 3.0.14Tryton Tryton 3.6.14Tryton Tryton 3.8.10Tryton Tryton 3.8.4Tryton Tryton 3.0.13Tryton Tryton 3.2.10Tryton Tryton 3.0.15Tryton Tryton 3.0.3Tryton Tryton 3.4.13Tryton Tryton 3.8.2Tryton Tryton 3.6.6Tryton Tryton 3.0.10Tryton Tryton 3.0.12Tryton Tryton 3.0.7Tryton Tryton 3.4.3
3.5
CVSSv2
CVE-2016-1241
Tryton 3.x prior to 3.2.17, 3.4.x prior to 3.4.14, 3.6.x prior to 3.6.12, 3.8.x prior to 3.8.8, and 4.x prior to 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Tryton Tryton 3.8.3Tryton Tryton 3.8.1Tryton Tryton 3.8.6Tryton Tryton 3.8.5Tryton Tryton 3.8.2Tryton Tryton 3.8.0Tryton Tryton 3.8.4Tryton Tryton 3.8.7Tryton Tryton 4.0.1Tryton Tryton 4.0.3Tryton Tryton 4.0.2Tryton Tryton 4.0.0Tryton TrytonTryton Tryton 3.6.10Tryton Tryton 3.2.0Tryton Tryton 3.6.2Tryton Tryton 3.6.1Tryton Tryton 3.6.11Tryton Tryton 3.6.6Tryton Tryton 3.6.8Tryton Tryton 3.6.9Tryton Tryton 3.6.0
4
CVSSv2
CVE-2016-1242
file_open in Tryton prior to 3.2.17, 3.4.x prior to 3.4.14, 3.6.x prior to 3.6.12, 3.8.x prior to 3.8.8, and 4.x prior to 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
Tryton Tryton 4.0.3Tryton Tryton 4.0.2Tryton Tryton 4.0.0Tryton Tryton 4.0.1Tryton TrytonTryton Tryton 3.8.7Tryton Tryton 3.8.0Tryton Tryton 3.8.3Tryton Tryton 3.8.1Tryton Tryton 3.8.6Tryton Tryton 3.8.5Tryton Tryton 3.8.4Tryton Tryton 3.8.2Tryton Tryton 3.4.2Tryton Tryton 3.4.5Tryton Tryton 3.4.13Tryton Tryton 3.4.0Tryton Tryton 3.4.11Tryton Tryton 3.4.9Tryton Tryton 3.4.12Tryton Tryton 3.4.4Tryton Tryton 3.4.1
5.5
CVSSv2
CVE-2012-0215
model/modelstorage.py in the Tryton application framework (trytond) prior to 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) ...
Tryton Trytond 2.0.5Tryton Trytond 1.8.7Tryton Trytond 1.4.13Tryton Trytond 1.6.8Tryton Trytond
9
CVSSv2
CVE-2014-6633
The safe_eval function in trytond in Tryton prior to 2.4.15, 2.6.x prior to 2.6.14, 2.8.x prior to 2.8.11, 3.0.x prior to 3.0.7, and 3.2.x prior to 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the w...
Tryton Tryton
4.3
CVSSv2
CVE-2018-19443
The client in Tryton 5.x prior to 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could t...
Tryton Tryton 5.0.0
7.8
CVSSv2
CVE-2013-4510
Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed prior to 20131104 and previous versions, allows remote servers to write arbitrary files via path separators in the extension of a report.
Tryton Tryton 3.0.0
5
CVSSv2
CVE-2012-2238
trytond 2.4: ModelView.button fails to validate authorization
Tryton Trytond
5
CVSSv2
CVE-2022-26662
An XML Entity Expansion (XEE) issue exists in Tryton Application Platform (Server) 5.x up to and including 5.0.45, 6.x up to and including 6.0.15, and 6.1.x and 6.2.x up to and including 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x up to and includin...
Tryton ProteusTryton TrytondDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
4
CVSSv2
CVE-2022-26661
An XXE issue exists in Tryton Application Platform (Server) 5.x up to and including 5.0.45, 6.x up to and including 6.0.15, and 6.1.x and 6.2.x up to and including 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x up to and including 5.0.11, 6.x up to and...
Tryton ProteusTryton TrytondDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook