Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2025/11/30 3:30 a.m.•25 views

GHSA-6QJ9-2G9M-29X9 Tryton sao allows XSS because it does not escape completion values

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.9AI score0.00168EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/30 12:00 a.m.•5 views

PT-2025-62942

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.9AI score0.00168EPSS
SaveExploits0References5
CVE
CVE
•added 2025/11/30 12:00 a.m.•43 views

CVE-2025-66421

CVE-2025-66421 affects Tryton sao (tryton-sao) prior to 7.6.11, with an XSS vulnerability due to unescaped completion values. Affected versions are before 7.6.11, with fixes in 7.6.11, 7.4.21, 7.0.40, and 6.0.69. Impact is cross-site scripting; exploitation details are not provided in the cited d...

5.4CVSS5.9AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/30 12:00 a.m.•5 views

CVE-2025-66421: Improper Neutralization of Input During Web Page Generation

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS5.9AI score0.00168EPSS
SaveExploits0References2
Rows per page
Query Builder