CVE-2020-37014
CVE-2020-37014 · Tryton 5.4 - Persistent Cross-Site Scripting
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user interfaces.
CVSS 5.1 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
tryton
- Versions
- ≥ 0, ≤ 5.4: Affected (custom)
No fix published
tryton-sao Debian:12
- Affected ranges
- ECOSYSTEM: < 5.0.26-1
Update to 5.0.26-1
tryton-sao Debian:13
- Affected ranges
- ECOSYSTEM: < 5.0.26-1
Update to 5.0.26-1
tryton-sao Debian:14
- Affected ranges
- ECOSYSTEM: < 5.0.26-1
Update to 5.0.26-1