CVE-2014-6633

HIGH

8.8

CVSS Severity Score

EPSS Score0.1560%

EPSS Percentile5.86th

Published2018年4月12日

Last Modified2024年11月21日

Vulnerability Description

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module.

Affected Platforms (CPE)

📦

Tryton

>= 2.4.0 and < 2.4.15

📦

Tryton

>= 2.6.0 and < 2.6.14

📦

Tryton

>= 2.8.0 and < 2.8.11

📦

Tryton

>= 3.0.0 and < 3.0.7

📦

Tryton

>= 3.2.0 and < 3.2.3

References & Advisories

🔗 http://www.tryton.org/posts/security-release-for-issue4155.html

🔗 https://bugs.tryton.org/issue4155

🔗 http://www.tryton.org/posts/security-release-for-issue4155.html

🔗 https://bugs.tryton.org/issue4155

Vulnerability Description

Affected Platforms (CPE)

Tryton

Tryton

Tryton

Tryton

Tryton

References & Advisories

関連する脆弱性情報