Vulnerabilities

TI-2025-40860 CVE-2025-66424 · GHSA-2w93-qwpp-vgvj

Incorrect authorization in trytond

LOW 28

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00257 Published 2025-11-30 Fixed in 6.0.70, 7.0.40 +2 CWE-863

TI-2025-40859 CVE-2025-66423 · GHSA-p3p5-xrmv-4j6x

LOW 31

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00242 Published 2025-11-30 Fixed in 6.0.70, 7.0.40 +2 CWE-863

TI-2025-40858 CVE-2025-66422 · GHSA-jqfc-9q34-prhg

LOW 20

Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0031 Published 2025-11-30 Fixed in 6.0.70, 7.0.40 +2 CWE-402