debian/tryton-client vulnerabilities

Latest debian/tryton-client CVEs

Newest publication first

1. DLA-4054-1 tryton-client - update

   Published 2025-02-16

   Unknown

2. DLA-3854-1 tryton-client - security update

   Published 2024-06-30

   Unknown

3. CVE-2018-19443 Session Fixation in Tryton

   Published 2018-11-22

   Medium·CVSS 5.9 EPSS 1.1%

   The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but it contains in the header the current session of the user. This session could the...

4. CVE-2013-4510 Tryton Directory Traversal vulnerability

   Published 2013-11-15

   High·CVSS 7.8 EPSS 2.2%

   Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

5. DSA-2791-1 tryton-client - missing input sanitization

   Published 2013-11-04

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.