-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| trytond | pip | >= 3.2.0, < 3.2.10 | 3.2.10 |
| trytond | pip | >= 3.4.0, < 3.4.8 | 3.4.8 |
| trytond | pip | >= 3.6.0, < 3.6.5 | 3.6.5 |
| trytond | pip | >= 3.8.0, < 3.8.1 | 3.8.1 |
Miggo AIRoot Cause AnalysisThe vulnerability description and Tryton issue #5167 explicitly point to ModelStorage.write in model/modelstorage.py as the source of insufficient access checks. The commit 06230c381593 fixes this by checking all fields across all records in the sequence. The key flaw was that access control validation was only applied to fields in the first values dictionary passed to write(), while subsequent records in the arguments were not properly validated, enabling field write bypasses.