PyPI/trytond CVE-2015-0861: unknown, EPSS 1.16%
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write
Action: Upgrade trytond to 3.2.10 or later.
pip install trytond==3.2.10pip install trytond==3.4.8pip install trytond==3.6.5pip install trytond==3.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.2.10 | - |
| 3.4.0 | 3.4.8 | - |
| 3.6.0 | 3.6.5 | - |
| 3.8.0 | 3.8.1 | - |
Fixed versions
| 3.2.10 | 3.4.8 | 3.6.5 | 3.8.1 |
Sources
- osv: PYSEC-2016-11
- http://www.debian.org/security/2015/dsa-3425
- https://bugs.tryton.org/issue5167
- http://www.tryton.org/posts/security-release-for-issue5167.html
- https://github.com/advisories/GHSA-c8q5-2j73-qvcc
CVE-2015-0861 · published · modified · JSON