VDB
EN
MEDIUM 6.5

PYSEC-2026-740

Improper Restriction of XML External Entity Reference in trytond and proteus

상세

An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / proteus
최초 영향 버전: 5.0.0 수정 버전: 5.0.12
수정 pip install --upgrade 'proteus>=5.0.12'

참고