CVE-2015-0861: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.

Affected products

• Debian Debian Linux: version 8.0 only
• Tryton Trytond: from 3.2.0, before 3.2.10 (fixed in 3.2.10); from 3.4.0, before 3.4.8 (fixed in 3.4.8); from 3.6.0, before 3.6.5 (fixed in 3.6.5); from 3.8.0, before 3.8.1 (fixed in 3.8.1)

Published 2016-04-13. Last modified 2026-06-17.