CVE-2025-66423_CVE-2025-66423

7.1 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Description

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Basic Information

ID CVE-2025-66423

Source mitre

Published Nov 30, 2025 at 00:00

Modified Nov 30, 2025 at 02:37

Affected Product

Vendor Tryton

Product trytond

Version 6.0.0

Affected Versions Tryton trytond 6.0.0
Tryton trytond 7.0.0
Tryton trytond 7.1.0
Tryton trytond 7.5.0

CWE Classification

CWE-863

References

{
    "lastseen": "",
    "description": "Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.",
    "published": "2025-11-30T00:00:00.000Z",
    "modified": "2025-11-30T02:37:20.290Z",
    "type": "cve",
    "title": "CVE-2025-66423",
    "source": "mitre",
    "references": "https://discuss.tryton.org/t/security-release-for-issue-14364/8952\nhttps://foss.heptapod.net/tryton/tryton/-/issues/14364",
    "id": "CVE-2025-66423",
    "bulletinFamily": "",
    "cwe": [
        "CWE-863"
    ],
    "cvelist": null,
    "sourceData": "Tryton trytond 6.0.0\nTryton trytond 7.0.0\nTryton trytond 7.1.0\nTryton trytond 7.5.0",
    "sourceHref": "",
    "cvss": {
        "score": 7.1,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "trytond",
    "version": "6.0.0",
    "vendor": "Tryton",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}