Approved changes feed: RSS · Atom

cpe:2.3:a:tryton:tryton:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorTryton (6676310b-e59a-5204-9937-d4dd2ec558e1)
ProductTryton (08f959a5-873a-5930-bd27-52982618bfbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/tryton-client purl2cpe 2026-06-01 10:15:41.094710
pkg:deb/ubuntu/tryton-client purl2cpe 2026-06-01 10:15:41.094711
pkg:github/tryton/tryton purl2cpe 2026-06-01 10:15:41.094713
pkg:rpm/fedora/tryton purl2cpe 2026-06-01 10:15:41.094714
pkg:rpm/opensuse/tryton purl2cpe 2026-06-01 10:15:41.094716

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-0360 vulnerable 2026-06-08 05:08:25.980331 Details available
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.
Published: 2017-04-04T17:00:00.000Z
Updated: 2024-08-05T13:03:57.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4510 vulnerable 2026-06-08 05:04:47.540495 Details available
Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.
Published: 2013-11-15T18:16:00.000Z
Updated: 2024-08-06T16:45:14.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.