Cloudanix VulnDB

CVE-2025-66423

High · 7.1

trytond does not enforce access rights for the route of the HTML editor.

CVSS

7.1

EPSS

0.2%

Published

Nov 30, 2025

CISA due date

—

The record

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Affected packages

Ecosystem Package Introduced Fixed
PyPI trytond 6.0.0 6.0.70
PyPI trytond 7.0.0 7.0.40
PyPI trytond 7.1.0 7.4.21
PyPI trytond 7.5.0 7.6.11
pypi trytond 6.0.0 No fix
pypi trytond 7.0.0 No fix
pypi trytond 7.1.0 No fix
pypi trytond 7.5.0 No fix

Related vulnerabilities