CVE-2017-0360

file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with…

published April 4, 2017

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01554 · 74.9th percentile
Published
2017-04-04T17:00Z
EPSS history
Timeline
  • 04 APR 17:00Z
    file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with…
    cvelistv5