PT-2025-48377 · Unknown · Tryton Sao

Published 2025-11-30 · Updated 2025-11-30 · CVE-2025-66420

Positive Technologies · (AI Summary)

CVSS v3.1

5.4

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tryton sao (aka tryton-sao) versions prior to 7.6.9 Tryton sao (aka tryton-sao) version 7.4.19 Tryton sao (aka tryton-sao) version 7.0.38 Tryton sao (aka tryton-sao) version 6.0.67

Description The software contains a cross-site scripting (XSS) issue that can be triggered through a malicious HTML attachment. The issue allows for the injection of potentially harmful scripts into a user's browser.

Recommendations Update Tryton sao to version 7.6.9 or later. Update Tryton sao to version 7.4.19. Update Tryton sao to version 7.0.38. Update Tryton sao to version 6.0.67.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-66420

Affected Products

Tryton Sao

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66420 · Security Note
• https://discuss.tryton.org/t/security-release-for-issue-14290/8895 · Note
• https://twitter.com/CVEnew/status/1994981186699927948 · Twitter Post
• https://foss.heptapod.net/tryton/tryton/-/issues/14290 · Note