VYPR
← All advisories
High severityNVD Advisory· Published Nov 21, 2019· Updated Aug 6, 2024

CVE-2012-2238

CVE-2012-2238

Description

trytond 2.4: ModelView.button fails to validate authorization

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
trytondPyPI
>= 2.4.0, < 2.4.22.4.2

Affected products

1

Patches

2
4509595762da

Fix search button clause in ModelButton.get_groups

https://github.com/tryton/trytondCédric KrierSep 10, 2012via ghsa
commit
2 files changed · +2 −1
  • CHANGELOG+1 −0 modified
    @@ -1,3 +1,4 @@
+* Fix search button clause in ModelButton.get_groups (CVE-2012-2238)
 * Merge all kind of buttons
 * Use XML id for board action instead of id
 * Add states attribute to notebook
  • trytond/ir/model.py+1 −1 modified
    @@ -555,7 +555,7 @@ def get_groups(self, model, name):
         Return a set of group ids for the named button on the model.
         '''
         button_ids = self.search([
-                ('model', '=', model),
+                ('model.model', '=', model),
                 ('name', '=', name),
                 ])
         if not button_ids:
96cd5d58ea82

Fix search button clause in ModelButton.get_groups

https://github.com/tryton/trytondCédric KrierSep 10, 2012via ghsa
commit
2 files changed · +3 −1
  • CHANGELOG+2 −0 modified
    @@ -1,3 +1,5 @@
+* Fix search button clause in ModelButton.get_groups (CVE-2012-2238)
+
 Version 2.4.1 - 2012-04-24
 * Restore es_AR translation
  • trytond/ir/model.py+1 −1 modified
    @@ -522,7 +522,7 @@ def get_groups(self, model, name):
         Return a set of group ids for the named button on the model.
         '''
         button_ids = self.search([
-                ('model', '=', model),
+                ('model.model', '=', model),
                 ('name', '=', name),
                 ])
         if not button_ids:

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

11

News mentions

0

No linked articles in our index yet.