Описание
Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| tryton-sao | fixed | 7.0.40+ds1-1 | package |
Примечания
https://discuss.tryton.org/t/security-release-for-issue-14363/8951
https://foss.heptapod.net/tryton/tryton/-/issues/14363
https://foss.heptapod.net/tryton/tryton/-/commit/cd3931840db95bf96064b7f4f44f068f78df3c76
Связанные уязвимости
CVSS3: 5.4
ubuntu
2 месяца назад
Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.
CVSS3: 5.4
nvd
2 месяца назад
Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.
CVSS3: 5.4
github
2 месяца назад
Tryton sao allows XSS because it does not escape completion values