GHSA-qjmc-wwmw-cq9r

Tryton Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2013-4510

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	trytond	3.0.0	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-4510 advisory
https://bugs.tryton.org/issue3446 web
https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2013-28.yaml web
http://hg.tryton.org/tryton/rev/357d0a4d9cb8 web
http://www.debian.org/security/2013/dsa-2791 web
http://www.openwall.com/lists/oss-security/2013/11/04/21 web
http://www.tryton.org/posts/security-release-for-issue3446.html web