Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| trytond(PyPI) | 3.0.0 | 3.2.17 | N/A |
| trytond(PyPI) | 3.4.0 | 3.4.14 | N/A |
| trytond(PyPI) | 3.8.0 | 3.8.8 | N/A |
| trytond(PyPI) | 3.6.0 | 3.6.12 | N/A |
| trytond(PyPI) | 4.0.0 | 4.0.4 | N/A |
CVSS Metrics
