VYPR
← All advisories
High severity7.1NVD Advisory· Published Nov 30, 2025· Updated Jun 17, 2026

CVE-2025-66423

CVE-2025-66423

Description

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
trytondPyPI
>= 7.5.0, < 7.6.117.6.11
trytondPyPI
>= 7.1.0, < 7.4.217.4.21
trytondPyPI
>= 7.0.0, < 7.0.407.0.40
trytondPyPI
>= 6.0.0, < 6.0.706.0.70

Affected products

3
  • Tryton/Trytond2 versions
    cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:tryton:trytond:*:*:*:*:*:*:*:*range: >=6.0.0,<6.0.70
    • (no CPE)range: 6.0.0
  • ghsa-coords
    pkg:pypi/trytond
    Range: >= 7.5.0, < 7.6.11

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.