Vendor
Tryton
7 known vulnerabilities.
2 results · Clear filters · Feed
-
High 7.1
trytond does not enforce access rights for the route of the HTML editor.
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
-
High 7.5
trytond Incorrect Authorization vulnerability
trytond 2.4: ModelView.button fails to validate authorization