Skip to content
OpenAdvisories
Medium DSA-4426-1 1 CVE

tryton-server - security update

Published Apr 7, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 tryton-server 4.2.1-2+deb9u1

Vulnerabilities 1

  • Medium 4.3
    CVE-2019-10868

    Tryton Improper Access Control

    In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to …

    trytond tryton-server tryton-server Debian Ubuntu PyPI