CVE-2014-6633 | BDVDB-2026-99196 Detail

Description#

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.tryton.org/posts/security-release-for-issue4155.html
https://bugs.tryton.org/issue4155

Exploit#

No public exploit known

History#

Version 12018-04-12Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.