135 matches found
openSUSE: Security Advisory for trytond (openSUSE-SU-2023:0209-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SQL Injection
trytond is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in modelsql.py, allowing an authenticated attacker to inject and execute malicious SQL queries into the system when reading fields without an SQL type...
openSUSE 15 Security Update : trytond (openSUSE-SU-2023:0209-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0209-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
openSUSE 15 Security Update : trytond (openSUSE-SU-2023:0208-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0208-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
OPENSUSE-SU-2023:0209-1 Security update for trytond
This update for trytond fixes the following issues: - Version 6.0.34 - Security Bugfix Release See https://discuss.tryton.org/t/security-release-for-issue-12428/6397 - Version 6.0.33 - Bugfix Release...
OPENSUSE-SU-2023:0208-1 Security update for trytond
This update for trytond fixes the following issues: - Version 6.0.34 - Security Bugfix Release see https://discuss.tryton.org/t/security-release-for-issue-12428/6397 - Version 6.0.33 - Bugfix Release...
PT-2023-35507 · Tryton · Tryton
Name of the Vulnerable Software and Affected Versions: trytond versions prior to 6.0.34 Description: The issue is related to a security bugfix release. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...
Security update for trytond (moderate)
openSUSE Security Update: Security update for trytond Announcement ID: openSUSE-SU-2023:0209-1 Rating: moderate References: 1213869 Affected Products: openSUSE Backports SLE-15-SP5 An update that contains security fixes can now be installed. Description: This update for trytond fixes the followin...
Security update for trytond (moderate)
openSUSE Security Update: Security update for trytond Announcement ID: openSUSE-SU-2023:0208-1 Rating: moderate References: 1213869 Affected Products: openSUSE Backports SLE-15-SP4 An update that contains security fixes can now be installed. Description: This update for trytond fixes the followin...
SUSE CVE-2019-10868
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values...
GHSA-C8Q5-2J73-QVCC trytond arbitrary fields write via a sequence of records
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records...
trytond arbitrary fields write via a sequence of records
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records...
trytond-account (>=4.2.0 <=4.2.11), trytond-account-asset (>=4.2.0 <=4.2.3) +99 more potentially affected by CVE-2017-0360 via trytond (=4.2.22)
trytond PYPI version =4.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on trytond and may be impacted: - trytond-account =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 and more Source cves: CVE-2017-0360 Source advisory: OSV:GHSA-7CWG-2575-3...
GHSA-JFGC-5VH4-8RH5 trytond Incorrect Authorization vulnerability
trytond 2.4: ModelView.button fails to validate authorization...
trytond Incorrect Authorization vulnerability
trytond 2.4: ModelView.button fails to validate authorization...
mds-account-de-skr04 (>=6.2.5 <=6.2.6), trytoncalidae-authentication-dummy (=6.2.0) +179 more potentially affected by CVE-2022-26662 via trytond (=6.2.14)
trytond PYPI version =6.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on trytond and may be impacted: - mds-account-de-skr04 =6.2.5, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.1 - trytond-account-credit-limit =6.2.0 - trytond-account-de-skr03...
mds-account-de-skr04 (>=6.2.5 <=6.2.6), trytoncalidae-authentication-dummy (=6.2.0) +179 more potentially affected by CVE-2022-26661 via trytond (=6.2.14)
trytond PYPI version =6.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on trytond and may be impacted: - mds-account-de-skr04 =6.2.5, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.0, =6.2.1 - trytond-account-credit-limit =6.2.0 - trytond-account-de-skr03...
Authorization Bypass
trytond is vulnerable to authorization bypass. The vulnerability exists as the search button ModelView.button in ModelButton.getgroups function does not return the proper group ID for authorization...
