Debian/tryton-server: medium 6.5
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
Action: Upgrade tryton-server to 7.0.30-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.30-1+deb13u1 | - |
Fixed versions
| 7.0.30-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-66424#Debian:13/tryton-server
- https://security-tracker.debian.org/tracker/CVE-2025-66424
published · modified · JSON