{"action":"Upgrade trytond to 4.2.3 or later.","affected":[{"introduced":"3.0.0","last_affected":"3.0.17"},{"introduced":"3.2.0","last_affected":"3.2.17"},{"introduced":"3.4.0","last_affected":"3.4.17"},{"introduced":"3.6.0","last_affected":"3.6.16"},{"introduced":"3.8.0","last_affected":"3.8.14"},{"introduced":"4.0.0","last_affected":"4.0.9"},{"fixed":"4.2.3","introduced":"4.2.0"}],"component":"trytond","cve_ids":["CVE-2017-0360"],"ecosystem":"PyPI","epss":0.01554,"exploited":false,"fixed_versions":["4.2.3"],"ghsa_id":"GHSA-7cwg-2575-3546","id":"tcs_01M5KF5RH97EHX3H8YJXT34648","modified_at":"2024-11-18T23:01:55.821127Z","published_at":"2022-05-13T01:39:57Z","references":["https://osv.dev/vulnerability/GHSA-7cwg-2575-3546","https://nvd.nist.gov/vuln/detail/CVE-2017-0360","https://github.com/tryton/trytond/commit/30e978593733385db3144f8c583eeb4679575cf0","https://github.com/tryton/trytond/commit/a67a7f03c30277515f530cad5950056171ed5bd1","https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2017-97.yaml","https://github.com/tryton/trytond","https://lists.debian.org/debian-security-announce/2017/msg00084.html","http://hg.tryton.org/trytond?cmd=changeset;node=472510fdc6f8","http://www.debian.org/security/2017/dsa-3826"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-7cwg-2575-3546","url":"https://osv.dev/vulnerability/GHSA-7cwg-2575-3546"}],"summary":"Tryton Information Disclosure Vulnerability"}