PT-2017-10548

Name of the Vulnerable Software and Affected Versions Tryton versions 3.x through 4.2.2 Description The issue allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. This is due to an incomplete fix for a previous issue...