Skip to content
OpenAdvisories
Medium DLA-882-1 1 CVE

tryton-server - security update

Published Apr 4, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 tryton-server 2.2.4-1+deb7u4

Vulnerabilities 1

  • Medium 5.3
    CVE-2017-0360

    Tryton Information Disclosure Vulnerability

    file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.

    trytond tryton-server tryton-server Debian Ubuntu PyPI