All errata/sisyphus/ALT-PU-2017-3618-1
ALT-PU-2017-3618-1

Package update python-module-trytond in branch sisyphus

Version4.2.1-alt1
Task#176742
Published2017-01-17
Max severityMEDIUM
Severity:

Closed issues (2)

CVE-2015-0861
MEDIUM4.3

model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.

Published: 2016-04-13Modified: 2025-04-12
CVSS 2.0MEDIUM 4.0
CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:P/A:N
CVSS 3.xMEDIUM 4.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
References
GHSA-c8q5-2j73-qvcc
MEDIUM5.3

trytond arbitrary fields write via a sequence of records

Published: 2022-05-14Modified: 2024-11-19
CVSS 3.xMEDIUM 5.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 4.0MEDIUM 5.3
CVSS:4.0/CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
References