GHSA-qjmc-wwmw-cq9r

Suggest an improvement
Source
https://github.com/advisories/GHSA-qjmc-wwmw-cq9r
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qjmc-wwmw-cq9r/GHSA-qjmc-wwmw-cq9r.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-qjmc-wwmw-cq9r
Aliases
Published
2022-05-17T04:58:00Z
Modified
2024-11-18T22:05:12Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Tryton Directory Traversal vulnerability
Details

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

Database specific 
{
    "nvd_published_at": "2013-11-18T02:55:00Z",
    "github_reviewed_at": "2024-05-01T10:44:44Z",
    "cwe_ids": [
        "CWE-22"
    ],
    "github_reviewed": true,
    "severity": "HIGH"
}
References

Affected packages

PyPI / trytond

Package

Name
trytond
View open source insights on deps.dev
Purl
pkg:pypi/trytond

Affected ranges

Affected versions

3.*

3.0.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qjmc-wwmw-cq9r/GHSA-qjmc-wwmw-cq9r.json"