PT-2025-48377 · Unknown · Tryton Sao

CVE-2025-66420

·

Publicado

2025-10-23

·

Atualizado

2025-11-30

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Tryton sao (aka tryton-sao) versions prior to 7.6.9 Tryton sao (aka tryton-sao) version 7.4.19 Tryton sao (aka tryton-sao) version 7.0.38 Tryton sao (aka tryton-sao) version 6.0.67
Description The software contains a cross-site scripting (XSS) issue that can be triggered through a malicious HTML attachment. The issue allows for the injection of potentially harmful scripts into a user's browser.
Recommendations Update Tryton sao to version 7.6.9 or later. Update Tryton sao to version 7.4.19. Update Tryton sao to version 7.0.38. Update Tryton sao to version 6.0.67.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-66420
DSA-6034-1
GHSA-XHGV-99MJ-8M2X

Produtos afetados

Tryton Sao