trytond vulnerabilities (PyPI)

14 vulnerabilities.

• trytond PyPI trytond does not enforce access rights for data export CVE-2025-66424 Fix available 6.5 MediumNovember 27, 2025
• trytond PyPI trytond does not enforce access rights for the route of the HTML editor. CVE-2025-66423 Fix available 7.1 HighNovember 27, 2025
• trytond PyPI trytond allows remote attackers to obtain sensitive trace-back (server setup) information CVE-2025-66422 Fix available 4.3 MediumNovember 27, 2025
• trytond PyPI Improper Restriction of XML External Entity Reference in trytond and proteus CVE-2022-26661 Fix available 6.5 MediumMarch 7, 2022
• trytond PyPI XML Entity Expansion in trytond and proteus CVE-2022-26662 Fix available 7.5 HighMarch 7, 2022
• trytond PyPI trytond Incorrect Authorization vulnerability CVE-2012-2238 Fix available 7.5 HighNovember 21, 2019
• trytond PyPI Tryton Improper Access Control CVE-2019-10868 Fix available 4.3 MediumApril 5, 2019
• trytond PyPI Tryton Information Disclosure Vulnerability CVE-2017-0360 Fix available 5.3 MediumApril 4, 2017
• trytond PyPI Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter CVE-2016-1242 Fix available 4.4 MediumAugust 30, 2016
• trytond PyPI Tryton allows users to read the hashed password CVE-2016-1241 Fix available 5.3 MediumAugust 30, 2016
• trytond PyPI trytond arbitrary fields write via a sequence of records CVE-2015-0861 Fix available 4.3 MediumDecember 17, 2015
• trytond PyPI Tryton vulnerable to arbitrary command execution CVE-2014-6633 Fix available 8.8 HighOctober 4, 2014
• trytond PyPI Tryton Directory Traversal vulnerability CVE-2013-4510 Fix available 7.8 HighNovember 4, 2013
• trytond PyPI Trytond allows modification of privileges of arbitrary users CVE-2012-0215 Fix available 5.5 MediumMarch 29, 2012