Executive brief
trytond 2.4: ModelView.button fails to validate authorization
Affected products
- PyPI trytond
Junglewise Threat Intelligence
CVE-2012-2238: PYSEC-2019-211 - trytond 2.4: ModelView.button fails to validate authorization
CVE-2012-2238 · Severity: low · CVSS 3.1 · Published 2019-11-21
Technologies: trytond (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3390 - Tryton vulnerable to arbitrary command execution
- PYSEC-2026-1989 - trytond does not enforce access rights for data export
- PYSEC-2026-1990 - trytond allows remote attackers to obtain sensitive trace-back (server setup) information
- PYSEC-2026-1991 - trytond does not enforce access rights for the route of the HTML editor.
- PYSEC-2026-1054 - Tryton Directory Traversal vulnerability