trac

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

trac records in CISA KEV

No trac vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Trac 2 records LOW

Records

3 records

TI-2010-04831 CVE-2010-5108 · GHSA-pcm6-w2q9-cfq4

Incorrect default permissions in trac

LOW 35

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01303 Published 2019-11-13 No fix listed CWE-276

TI-2008-05354 CVE-2008-5646 · GHSA-437p-qw95-wqqr

Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of…

LOW 35

Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01227 Published 2008-12-17 Fixed in 0.11.2

TI-2008-05355 CVE-2008-5647 · GHSA-ww53-wxxr-8f9w

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows…

LOW 25

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0107 Published 2008-12-17 Fixed in 0.11.2

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0