tocsin

PyPI/trytond CVE-2014-6633: unknown, EPSS 2.58%

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary c

Action: Upgrade trytond to 2.4.15 or later.

pip install trytond==2.4.15
pip install trytond==2.6.14
pip install trytond==2.8.11
pip install trytond==3.0.7
pip install trytond==3.2.3

Affected

introducedfixedlast affected
2.4.02.4.15-
2.6.02.6.14-
2.8.02.8.11-
3.0.03.0.7-
3.2.03.2.3-

Fixed versions

2.4.152.6.142.8.113.0.73.2.3

Sources

CVE-2014-6633 · published · modified · JSON