{
  "cveId": "CVE-2020-37014",
  "url": "https://patchblox.com/security/cve/CVE-2020-37014",
  "summary": "CVE-2020-37014 is fixed in tryton-sao on 1 platform, first by DEBIAN-CVE-2020-37014, released January 30, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "tryton-sao: Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote...",
  "description": "Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user interfaces.",
  "published": "2026-01-30T17:16:11Z",
  "severity": "",
  "epss": 0.00369,
  "epssPercentile": 0.30962,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "tryton-sao",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.0.26-1",
      "fix": "DEBIAN-CVE-2020-37014",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2020-37014",
      "released": "2026-01-30T17:16:11Z"
    },
    {
      "platform": "linux",
      "product": "tryton-sao",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.0.26-1",
      "fix": "DEBIAN-CVE-2020-37014",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2020-37014",
      "released": "2026-01-30T17:16:11Z"
    },
    {
      "platform": "linux",
      "product": "tryton-sao",
      "release": "Debian 14",
      "fixedVersion": "5.0.26-1",
      "fix": "DEBIAN-CVE-2020-37014",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2020-37014",
      "released": "2026-01-30T17:16:11Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}