{"action":"Upgrade trytond to 2.2.4 or later.","affected":[{"fixed":"2.2.4","introduced":"0"}],"component":"trytond","cve_ids":["CVE-2012-0215"],"ecosystem":"PyPI","epss":0.01983,"exploited":false,"fixed_versions":["2.2.4"],"ghsa_id":"GHSA-cqg4-rf29-3mv6","id":"tcs_01M5KG5PB027DADX6TF1R61VXY","modified_at":"2026-06-10T17:02:46.160149018Z","published_at":"2012-07-12T20:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2012-6","http://www.debian.org/security/2012/dsa-2444","http://news.tryton.org/2012/03/security-releases-for-all-supported.html","https://bugs.tryton.org/issue2476","http://hg.tryton.org/trytond/rev/8e64d52ecea4","https://github.com/advisories/GHSA-cqg4-rf29-3mv6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2012-6","url":"https://osv.dev/vulnerability/PYSEC-2012-6"}],"summary":"model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenti"}