Skip to content
OpenAdvisories

Package · Ubuntu

tryton-server

9 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.1

    trytond does not enforce access rights for the route of the HTML editor.

    Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

  • High 7.5

    XML Entity Expansion in trytond and proteus

    An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x throu…