CVE-2012-2238: High severity tryton trytond vulnerability

Q: What is CVE-2012-2238?

CVE-2012-2238 is a vulnerability in trytond 2.4 where ModelView.button fails to validate authorization.

Q: How severe is CVE-2012-2238?

CVE-2012-2238 has a severity rating of 7.5 (high).

Q: Which software versions are affected by CVE-2012-2238?

The affected software versions are: tryton-server 5.0.4-2+deb10u1, tryton-server 5.0.4-2+deb10u2, tryton-server 5.0.33-2+deb11u2, tryton-server 6.0.29-2+deb12u1, and tryton-server 6.0.36-1.

Q: How can I fix CVE-2012-2238?

To fix CVE-2012-2238, update your tryton-server to version 5.0.4-2+deb10u1, 5.0.4-2+deb10u2, 5.0.33-2+deb11u2, 6.0.29-2+deb12u1, or 6.0.36-1.

Q: Where can I find more information about CVE-2012-2238?

More information about CVE-2012-2238 can be found at the following references: https://security-tracker.debian.org/tracker/CVE-2012-2238, http://hg.tryton.org/2.4/trytond/rev/279f0031b461, http://www.openwall.com/lists/oss-security/2012/09/11/10

Published Nov 21, 2019

Updated

trytond 2.4: ModelView.button fails to validate authorization.

Other sources

trytond 2.4: ModelView.button fails to validate authorization

Affected Software

3 affected componentsFixes available

pip/trytond>=2.4.0<2.4.2

2.4.2

tryton trytond>=2.4.0<2.4.2

debian/tryton-server

5.0.33-2+deb11u25.0.33-2+deb11u46.0.29-2+deb12u47.0.30-1+deb13u17.0.43-1

Remediation

Patch Available

http://hg.tryton.org/2.4/trytond/rev/279f0031b461

Event History

Nov 21, 2019

CVE Published

via MITRE·01:47 PM

Data Sourced

via MITRE·01:47 PM

DescriptionWeakness

Apr 23, 2022

Advisory Published

via GitHub·12:40 AM

Feb 18, 2026

Data Sourced

via Debian·01:24 AM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2012-2238?