CVE-2014-6633

NONE EPSS 83.5%
Published Apr 12, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published Apr 12, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module.

Threat Intelligence

EPSS Exploit Probability
83.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-77 Command Injection Injection

Affected Products 5

VendorProductVersionRange
trytontryton*≥2.4.0  –  <2.4.15
trytontryton*≥2.6.0  –  <2.6.14
trytontryton*≥2.8.0  –  <2.8.11
trytontryton*≥3.0.0  –  <3.0.7
trytontryton*≥3.2.0  –  <3.2.3

References 2

  • tryton.org http://www.tryton.org/posts/security-release-for-issue4155.html
    Vendor Advisory
  • bugs.tryton.org https://bugs.tryton.org/issue4155
    Issue Tracking

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.