Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | tryton-server | 3.4.0-3+deb8u3 |
Vulnerabilities 1
-
Medium 5.3
Tryton Information Disclosure Vulnerability
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.