Vulnerability	Vulnerable Version
M Arbitrary File Read `trytond` is a Tryton server file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.	[3,4.2.3)
M Directory Traversal `trytond` is a Tryton server. file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.	[,3.2.17)[3.4,3.4.14)[3.6,3.6.12)[3.8,3.8.8)[4,4.0.4)
M Privilege Escalation `trytond` is a Tryton server model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.	[3.2,3.2.10)[3.4,3.4.8)[3.6,3.6.5)[3.8,3.8.1)

Go back to all versions of this package