GHSA-qjmc-wwmw-cq9rHighCVSS 7.5
Tryton Directory Traversal vulnerability
🔗 CVE IDs covered (1)
📋 Description
Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.
🎯 Affected products1
- pip/trytond:= 3.0.0
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2013-4510
- https://bugs.tryton.org/issue3446
- http://hg.tryton.org/tryton/rev/357d0a4d9cb8
- http://www.debian.org/security/2013/dsa-2791
- http://www.openwall.com/lists/oss-security/2013/11/04/21
- http://www.tryton.org/posts/security-release-for-issue3446.html
- https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2013-28.yaml
- https://github.com/advisories/GHSA-qjmc-wwmw-cq9r