PT-2025-48378 · Unknown · Tryton Sao

Published 2025-11-25 · Updated 2025-11-30 · CVE-2025-66421

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tryton sao versions prior to 7.6.11 Tryton sao versions prior to 7.4.21 Tryton sao versions prior to 7.0.40 Tryton sao versions prior to 6.0.69

Description The software does not properly escape completion values, leading to a cross-site scripting (XSS) condition.

Recommendations Update Tryton sao to version 7.6.11 or later. Update Tryton sao to version 7.4.21 or later. Update Tryton sao to version 7.0.40 or later. Update Tryton sao to version 6.0.69 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-66421

DSA-6061-1

Affected Products

Tryton Sao

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-66421 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-66421 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-66421 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-66421 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-66421 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6061-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-66421 · Vendor Advisory
• https://foss.heptapod.net/tryton/tryton/-/commit/cd3931840db95bf96064b7f4f44f068f78df3c76 · Note
• https://twitter.com/CVEnew/status/1994981187564060975 · Twitter Post
• https://t.me/CVEtracker/38477 · Telegram Post
• https://foss.heptapod.net/tryton/tryton/-/issues/14363 · Note
• https://t.me/cveNotify/144333 · Telegram Post
• https://discuss.tryton.org/t/security-release-for-issue-14363/8951 · Note