Skip to content
OpenAdvisories

Package · Debian

tryton-server

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-66423

    trytond does not enforce access rights for the route of the HTML editor.

    Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

    Tryton trytond trytond tryton-server Debian Ubuntu PyPI
  • High 7.5
    CVE-2022-26662

    XML Entity Expansion in trytond and proteus

    An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x throu…

    trytond tryton-server tryton-server tryton Debian Ubuntu PyPI
  • High 8.8
    CVE-2014-6633

    Tryton vulnerable to arbitrary command execution

    The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.doma…

    trytond tryton-server tryton Debian PyPI