UBUNTU-CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

CVE-2025-66422

CVE-2025-66422 affects Tryton trialdon t (Tryton core server) before version 7.6.11. The vulnerability allows remote attackers to obtain sensitive trace-back information from the server setup. Affected versions are Tryton trytond prior to 7.6.11, with fixes implemented in 7.6.11 as well as in 7.4...

PT-2025-48377

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

CVE-2025-66424

CVE-2025-66424 affects Tryton trytond before 7.6.11 (also impacting 6.0.0–7.0 and 7.4 paths per disclosure), where data exports are not protected by access rights. Root cause: the component does not enforce access rights during data export. Impact per available data indicates potential exposure o...

Tryton sao 跨站脚本漏洞

Tryton sao is a web client for Tryton's open source Universal Application Platform. A cross-site scripting vulnerability exists in Tryton sao versions prior to 7.6.11, which stems from unescaped completion values and could lead to a cross-site scripting attack...

CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

CVE-2025-66424

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70...

CVE-2025-66423

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70...

CVE-2025-66423

CVE-2025-66423 affects Tryton’s Trytond server, specifically 6.0 before 7.6.11. The root cause is that the HTML editor route did not enforce access rights, allowing unauthorized access as described in multiple sources. The vulnerability is fixed in versions 7.6.11, 7.4.21, 7.0.40, and 6.0.70. Acc...

Tryton sao 跨站脚本漏洞

Tryton sao is a web client for Tryton's open source Universal Application Platform. A cross-site scripting vulnerability exists in Tryton sao versions prior to 7.6.9, which stems from an HTML attachment that could lead to a cross-site scripting attack...

CVE-2025-66421

CVE-2025-66421 affects Tryton sao (tryton-sao) prior to 7.6.11, with an XSS vulnerability due to unescaped completion values. Affected versions are before 7.6.11, with fixes in 7.6.11, 7.4.21, 7.0.40, and 6.0.69. Impact is cross-site scripting; exploitation details are not provided in the cited d...

PT-2025-48378

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

CVE-2025-66422

Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back server setup information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70...

CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

Tryton trytond 安全漏洞

Tryton trytond is a core application server from Tryton Open Source. A security vulnerability exists in Tryton trytond version 6.0 through versions prior to 7.6.11, which stems from unenforced access to the HTML editor routes...

Tryton trytond 安全漏洞

Tryton trytond is a core application server from Tryton Open Source. A security vulnerability exists in Tryton trytond version 6.0 through versions prior to 7.6.11, which stems from unenforced access rights to data export...

CVE-2025-66420

The CVE-2025-66420 vulnerability affects Tryton sao (tryton-sao) prior to version 7.6.9, due to an HTML attachment that enables cross-site scripting (XSS). The underlying issue is an input/output handling flaw in HTML attachments that allows injected scripts to be executed in the context of the u...

CVE-2025-66420

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

CVE-2025-66421

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...