trytond Incorrect Authorization vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-2238 · ADVISORY
• tryton/trytond commit 4509595 · WEB
• tryton/trytond commit 96cd5d5 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/78435 · WEB
• pypa/advisory-database · WEB
• tryton/trytond · PACKAGE
• security-tracker.debian.org/tracker/CVE-2012-2238 · WEB
• web.archive.org/web/20200229115241/https://www.securityfocus.com/bid/55503 · WEB
• hg.tryton.org/2.4/trytond/rev/279f0031b461 · WEB
• openwall.com/lists/oss-security/2012/09/11/10 · WEB
• securityfocus.com/bid/55503 · Third Party Advisory

trytond のその他の脆弱性

• CVE-2025-66424中 6.5Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
• CVE-2025-66423高 7.1Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, a…
• CVE-2025-66422中 4.3Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4…
• CVE-2022-26662高 7.5An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x…
• CVE-2022-26661中 6.5An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.…