Search for packages
| purl | pkg:pypi/trac@0.11 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-a439-1szh-suc3
Aliases: CVE-2008-5646 GHSA-437p-qw95-wqqr PYSEC-2008-6 |
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup." |
Affected by 1 other vulnerability. |
|
VCID-mupf-wdpy-4uhm
Aliases: CVE-2008-5647 GHSA-ww53-wxxr-8f9w PYSEC-2008-7 |
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors. |
Affected by 1 other vulnerability. |
|
VCID-n4fk-91w4-j3cm
Aliases: CVE-2009-4405 GHSA-f9qv-j5g6-g5cr PYSEC-2009-7 |
Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5gzm-7288-b3cz | Trac Cross-site Scripting (XSS) vulnerability |
CVE-2008-3328
GHSA-x6jf-c7wh-7m7w PYSEC-2008-5 |
| VCID-jtqc-qgyg-9yaa | Trac allows remote attackers to execute unauthorized actions as other users. |
CVE-2006-5878
GHSA-2q26-r8c4-jfx5 PYSEC-2006-3 |
| VCID-pu44-hmnq-xqf1 | Trac missing Content-Disposition HTTP header |
CVE-2007-1406
GHSA-7jjr-3r8r-9pcf PYSEC-2007-3 |
| VCID-u89s-knjc-4bdw | Trac Open Redirect vulnerability |
CVE-2008-2951
GHSA-rcmj-xp8f-f6q4 PYSEC-2008-4 |
| VCID-veeh-4epg-tudf | Trac Cross-site Scripting (XSS) vulnerability |
CVE-2007-1405
GHSA-w7x2-57f7-3p3x PYSEC-2007-2 |