Security Release for issue 14907

Cédric Krier has discovered that access is not enforced when browsing record instances in template . Impact CVSS v3.0 Base Score: 6.5 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None Workaround There is no workaround. Resolution All affected users should upgrade trytond , marketing_automation and marketing_email to the latest version.