CVE-2015-0861
2 advisories.
PyPI/trytond CVE-2015-0861: medium 4.3, EPSS 1.16%
trytond arbitrary fields write via a sequence of records
Action: Upgrade trytond to 3.2.10 or later.
pip install trytond==3.2.10pip install trytond==3.4.8pip install trytond==3.6.5pip install trytond==3.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.2.10 | - |
| 3.4.0 | 3.4.8 | - |
| 3.6.0 | 3.6.5 | - |
| 3.8.0 | 3.8.1 | - |
Fixed versions
| 3.2.10 | 3.4.8 | 3.6.5 | 3.8.1 |
Sources
- osv: GHSA-c8q5-2j73-qvcc
- https://nvd.nist.gov/vuln/detail/CVE-2015-0861
- https://bugs.tryton.org/issue5167
- https://foss.heptapod.net/tryton/tryton/-/commit/06230c381593c79766c4d8dcc92da3391e3acad2
- https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2016-11.yaml
- https://github.com/tryton/trytond
- http://www.debian.org/security/2015/dsa-3425
- http://www.tryton.org/posts/security-release-for-issue5167.html
CVE-2015-0861 · published · modified · JSON
PyPI/trytond CVE-2015-0861: unknown, EPSS 1.16%
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write
Action: Upgrade trytond to 3.2.10 or later.
pip install trytond==3.2.10pip install trytond==3.4.8pip install trytond==3.6.5pip install trytond==3.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.2.10 | - |
| 3.4.0 | 3.4.8 | - |
| 3.6.0 | 3.6.5 | - |
| 3.8.0 | 3.8.1 | - |
Fixed versions
| 3.2.10 | 3.4.8 | 3.6.5 | 3.8.1 |
Sources
- osv: PYSEC-2016-11
- http://www.debian.org/security/2015/dsa-3425
- https://bugs.tryton.org/issue5167
- http://www.tryton.org/posts/security-release-for-issue5167.html
- https://github.com/advisories/GHSA-c8q5-2j73-qvcc
CVE-2015-0861 · published · modified · JSON