https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:36:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01944 bdu:2019-01944 https://cve.radiocsirt.org/vuln/bdu:2019-01944 https://cve.radiocsirt.org/vuln/euvd-2026-53982 EUVD-2026-53982 https://cve.radiocsirt.org/vuln/euvd-2026-53982 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10868 <p>In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> <p>In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10868 https://cve.radiocsirt.org/vuln/ghsa-f6f2-pwrj-64h3 <p><strong>Affected:</strong> PyPI: trytond</p> <p>In `trytond/model/modelstorage.py` in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> <p><strong>Affected:</strong> PyPI: trytond</p> <p>In `trytond/model/modelstorage.py` in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> https://cve.radiocsirt.org/vuln/ghsa-f6f2-pwrj-64h3 https://cve.radiocsirt.org/vuln/gsd-2019-10868 gsd-2019-10868 https://cve.radiocsirt.org/vuln/gsd-2019-10868 https://cve.radiocsirt.org/vuln/pysec-2019-127 <p><strong>Affected:</strong> PyPI: trytond</p> <p>In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> <p><strong>Affected:</strong> PyPI: trytond</p> <p>In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> https://cve.radiocsirt.org/vuln/pysec-2019-127 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10868 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: tryton-server, Ubuntu:22.04:LTS: tryton-server</p> <p>In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: tryton-server, Ubuntu:22.04:LTS: tryton-server</p> <p>In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10868