PT-2025-48380

CVE-2025-66423

·

Published

2025-11-27

·

Updated

2026-10-07

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Tryton versions prior to 6.0.70 Tryton versions prior to 7.0.40 Tryton versions prior to 7.4.21 Tryton versions prior to 7.6.11
Description The software does not enforce access rights for the route of the HTML editor.
Recommendations Update to Tryton version 6.0.70 or later. Update to Tryton version 7.0.40 or later. Update to Tryton version 7.4.21 or later. Update to Tryton version 7.6.11 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-P3P5-XRMV-4J6X
DSA-6064-1
PYSEC-2026-1991
Found an issue in the description? Have something to add? Feel free to write us 👾