Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | tryton-server | 5.0.33-2+deb11u4 |
Vulnerabilities 2
-
Medium 6.5
trytond does not enforce access rights for data export
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
-
Medium 4.3
trytond allows remote attackers to obtain sensitive trace-back (server setup) information
Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.