trytond Incorrect Authorization vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2012-2238 · ADVISORY
• tryton/trytond commit 4509595 · WEB
• tryton/trytond commit 96cd5d5 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/78435 · WEB
• pypa/advisory-database · WEB
• tryton/trytond · PACKAGE
• security-tracker.debian.org/tracker/CVE-2012-2238 · WEB
• web.archive.org/web/20200229115241/https://www.securityfocus.com/bid/55503 · WEB
• hg.tryton.org/2.4/trytond/rev/279f0031b461 · WEB
• openwall.com/lists/oss-security/2012/09/11/10 · WEB
• securityfocus.com/bid/55503 · Third Party Advisory

trytond의 다른 취약점

• CVE-2025-66424보통 6.5Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
• CVE-2025-66423높음 7.1Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, a…
• CVE-2025-66422보통 4.3Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4…
• CVE-2022-26662높음 7.5An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x…
• CVE-2022-26661보통 6.5An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.…