Tryton vulnerabilities

Products

• Trytond 9
• Tryton 7
• Proteus 2
• Sao 2

Newest

• tryton Tryton 5.4 - Persistent Cross-Site Scripting CVE-2020-37014 Fix available 5.1 MediumJanuary 30, 2026
• tryton trytond trytond does not enforce access rights for data export CVE-2025-66424 Fix available 6.5 MediumNovember 27, 2025
• tryton trytond trytond does not enforce access rights for the route of the HTML editor. CVE-2025-66423 Fix available 7.1 HighNovember 27, 2025
• tryton trytond trytond allows remote attackers to obtain sensitive trace-back (server setup) information CVE-2025-66422 Fix available 4.3 MediumNovember 27, 2025
• tryton sao Tryton sao allows XSS because it does not escape completion values CVE-2025-66421 Fix available 5.4 MediumNovember 25, 2025
• tryton sao Tryton sao allows XSS via an HTML attachment CVE-2025-66420 Fix available 5.4 MediumOctober 23, 2025
• tryton proteus, trytond, debian linux +2 more Improper Restriction of XML External Entity Reference in trytond and proteus CVE-2022-26661 Fix available 6.5 MediumMarch 7, 2022
• tryton proteus, trytond, debian linux +2 more XML Entity Expansion in trytond and proteus CVE-2022-26662 Fix available 7.5 HighMarch 7, 2022
• tryton trytond trytond Incorrect Authorization vulnerability CVE-2012-2238 Fix available 7.5 HighNovember 21, 2019
• tryton trytond, debian linux +1 more Tryton Improper Access Control CVE-2019-10868 Fix available 4.3 MediumApril 5, 2019
• tryton Session Fixation in Tryton CVE-2018-19443 Fix available 5.9 MediumNovember 22, 2018
• tryton Tryton Information Disclosure Vulnerability CVE-2017-0360 Fix available 5.3 MediumApril 4, 2017
• tryton Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter CVE-2016-1242 Fix available 4.4 MediumAugust 30, 2016
• tryton Tryton allows users to read the hashed password CVE-2016-1241 Fix available 5.3 MediumAugust 30, 2016
• tryton trytond, debian linux +1 more trytond arbitrary fields write via a sequence of records CVE-2015-0861 Fix available 4.3 MediumDecember 17, 2015
• tryton Tryton vulnerable to arbitrary command execution CVE-2014-6633 Fix available 8.8 HighOctober 4, 2014
• tryton Tryton Directory Traversal vulnerability CVE-2013-4510 Fix available 7.8 HighNovember 4, 2013
• tryton trytond Trytond allows modification of privileges of arbitrary users CVE-2012-0215 Fix available 5.5 MediumMarch 29, 2012