CVE-2012-2238

HIGH

trytond 2.4.0-2.4.1 - Incorrect Authorization in ModelView.button

Title source: llm
STIX 2.1

Description

trytond 2.4: ModelView.button fails to validate authorization

References (5)

Core 5
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2012-2238
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/78435
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2012/09/11/10
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/55503
Patch, Vendor Advisory x_refsource_misc
http://hg.tryton.org/2.4/trytond/rev/279f0031b461

Scores

CVSS v3 7.5
EPSS 0.0176
EPSS Percentile 75.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-863
Status published
Products (2)
pypi/trytond 2.4.0 - 2.4.2PyPI
tryton/trytond 2.4.0 - 2.4.2
Published Nov 21, 2019
Tracked Since Feb 18, 2026