GCVE - cpe:2.3:a:tryton:tryton:3.6.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tryton:tryton:3.6.3:*:*:*:*:*:*:*

part: a version: 3.6.3 update: *

Vendor	Tryton (`6676310b-e59a-5204-9937-d4dd2ec558e1`)
Product	Tryton (`08f959a5-873a-5930-bd27-52982618bfbe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/tryton-client`	purl2cpe	2026-06-01 10:15:41.095159
`pkg:deb/ubuntu/tryton-client`	purl2cpe	2026-06-01 10:15:41.095160
`pkg:github/tryton/tryton`	purl2cpe	2026-06-01 10:15:41.095162
`pkg:rpm/fedora/tryton`	purl2cpe	2026-06-01 10:15:41.095163
`pkg:rpm/opensuse/tryton`	purl2cpe	2026-06-01 10:15:41.095164

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-0360`	vulnerable	2026-06-08 05:08:26.010408	Details available file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242. Published: 2017-04-04T17:00:00.000Z Updated: 2024-08-05T13:03:57.006Z Open on db.gcve.eu Reference links http://www.debian.org/security/2017/dsa-3826 http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8 https://lists.debian.org/debian-security-announce/2017/msg00084.html http://www.securityfocus.com/bid/97489	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1242`	vulnerable	2026-06-08 05:07:26.991895	Details available file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors. Published: 2016-09-07T19:00:00.000Z Updated: 2024-08-05T22:48:13.633Z Open on db.gcve.eu Reference links http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html http://www.debian.org/security/2016/dsa-3656 https://bugs.tryton.org/issue5808	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1241`	vulnerable	2026-06-08 05:07:26.978964	Details available Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors. Published: 2016-09-07T19:00:00.000Z Updated: 2024-08-05T22:48:13.788Z Open on db.gcve.eu Reference links http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html https://bugs.tryton.org/issue5795 http://www.debian.org/security/2016/dsa-3656	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.