{"action":"Upgrade trytond to 4.2.21 or later.","affected":[{"fixed":"4.2.21","introduced":"4.2.0"},{"fixed":"4.4.19","introduced":"4.4.0"},{"fixed":"4.6.14","introduced":"4.6.0"},{"fixed":"4.8.10","introduced":"4.8.0"},{"fixed":"5.0.6","introduced":"5.0.0"}],"component":"trytond","cve_ids":["CVE-2019-10868"],"ecosystem":"PyPI","epss":0.01264,"exploited":false,"fixed_versions":["4.2.21","4.4.19","4.6.14","4.8.10","5.0.6"],"ghsa_id":"GHSA-f6f2-pwrj-64h3","id":"tcs_01M5KFEKR8S0ZFNWMJ3CC99BY9","modified_at":"2024-11-18T22:35:20.262163Z","published_at":"2019-04-10T14:31:37Z","references":["https://osv.dev/vulnerability/GHSA-f6f2-pwrj-64h3","https://nvd.nist.gov/vuln/detail/CVE-2019-10868","https://discuss.tryton.org/t/security-release-for-issue8189/1262","https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2019-127.yaml","https://github.com/tryton/trytond","https://hg.tryton.org/trytond/rev/f58bbfe0aefb","https://seclists.org/bugtraq/2019/Apr/14","https://www.debian.org/security/2019/dsa-4426"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-f6f2-pwrj-64h3","url":"https://osv.dev/vulnerability/GHSA-f6f2-pwrj-64h3"}],"summary":"Tryton Improper Access Control"}