Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.8.4-1", "binary_name": "tryton-client" }, { "binary_version": "2.8.4-1", "binary_name": "tryton-client-doc" } ] }