Skip to content
OpenAdvisories

Package · PyPI

tryton

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-26662

    XML Entity Expansion in trytond and proteus

    An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x throu…

    trytond tryton-server tryton-server tryton Debian Ubuntu PyPI
  • High 8.8
    CVE-2014-6633

    Tryton vulnerable to arbitrary command execution

    The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.doma…

    trytond tryton-server tryton Debian PyPI
  • High 7.5
    CVE-2013-4510

    Tryton Directory Traversal vulnerability

    Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

    trytond tryton tryton-client Debian PyPI