CVE-2025-66423: High severity tryton trytond vulnerability
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66423?
CVE-2025-66423 is considered a significant vulnerability due to inadequate access rights enforcement in the HTML editor route.
How do I fix CVE-2025-66423?
To resolve CVE-2025-66423, upgrade to Tryton trytond version 7.6.11 or later, or apply patches in versions 7.4.21, 7.0.40, or 6.0.70.
What versions of Tryton trytond are affected by CVE-2025-66423?
CVE-2025-66423 affects versions of Tryton trytond prior to 7.6.11, specifically versions 6.0.70 and earlier.
What impact does CVE-2025-66423 have on users?
CVE-2025-66423 may allow unauthorized users to access and modify data through the HTML editor, compromising system security.
How can I verify if my Tryton trytond installation is vulnerable to CVE-2025-66423?
Check the current version of your Tryton trytond installation; if it is below 7.6.11 or falls within the specified affected versions, it is vulnerable.