GitHub Advisoryadvisory · PyPI

GHSA-qjmc-wwmw-cq9r Tryton Directory Traversal vulnerability

HIGH Published 2022-05-17 Modified 2024-11-18 Official page ↗
Aliases
CVE-2013-4510
Ecosystem
PyPI
Packages
trytond
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-22
Reviewed
2024-05-01

Affected packages

• PyPI trytond: 3.0.0 (no fix yet)

Description

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

Related

Alias · CVE (1)

  • CVE-2013-4510 Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References