Clément Mercier using Claude has discovered that it is possible to retrieve the ephemeral data from the wizard execution of another user.ImpactCVSS v3.0 Base Score: 2.6Attack Vector: NetworkAttack Complexity: HighPrivileges Required: LowUser Interaction: RequiredScope: UnchangedConfidentiality: LowIntegrity: NoneAvailability: NoneWorkaroundThere is no known workaround.ResolutionAll affected users should upgrade trytond to the latest version.Affected versions per series:trytond:8.2: = 7.0.60Referencehttps://bugs.tryton.org/15206Concerns?Any security concerns should be reported on the bug-tracker at https://bugs.tryton.org/ with the confidential checkbox checked. 1 post - 1 participant Read full topic