CVE-2013-4510

high

Description

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0042

https://bugs.tryton.org/issue3446

http://www.tryton.org/posts/security-release-for-issue3446.html

http://www.openwall.com/lists/oss-security/2013/11/04/21

http://www.debian.org/security/2013/dsa-2791

http://hg.tryton.org/tryton/rev/357d0a4d9cb8

Details

Source: Mitre, NVD

Published: 2013-11-18

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Severity: High

CVSS v4

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.02173