| Package | Affected versions | Patched versions |
|---|---|---|
| trytond | ≥ 3.2.0, < 3.2.10≥ 3.4.0, < 3.4.8≥ 3.6.0, < 3.6.5≥ 3.8.0, < 3.8.1 | 3.2.103.4.83.6.53.8.1 |
| trytond | ≥ 3.2.0, < 3.2.10≥ 3.4.0, < 3.4.8≥ 3.6.0, < 3.6.5≥ 3.8.0, < 3.8.1 | 3.2.103.4.83.6.53.8.1 |
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free