{"action":"Upgrade trytond to 2.4.2 or later.","affected":[{"fixed":"2.4.2","introduced":"2.4.0"}],"component":"trytond","cve_ids":["CVE-2012-2238"],"ecosystem":"PyPI","epss":0.01778,"exploited":false,"fixed_versions":["2.4.2"],"ghsa_id":"GHSA-jfgc-5vh4-8rh5","id":"tcs_01M5KG9099Y6NX78Q16VKS59SB","modified_at":"2026-06-10T17:02:47.235231335Z","published_at":"2019-11-21T14:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-211","http://www.securityfocus.com/bid/55503","https://security-tracker.debian.org/tracker/CVE-2012-2238","http://hg.tryton.org/2.4/trytond/rev/279f0031b461","https://exchange.xforce.ibmcloud.com/vulnerabilities/78435","http://www.openwall.com/lists/oss-security/2012/09/11/10","https://github.com/advisories/GHSA-jfgc-5vh4-8rh5"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2019-211","url":"https://osv.dev/vulnerability/PYSEC-2019-211"},{"source":"nvd","source_id":"CVE-2012-2238","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2238"}],"summary":"trytond 2.4: ModelView.button fails to validate authorization"}