Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2010-04831 CVE-2010-5108 · GHSA-pcm6-w2q9-cfq4

Incorrect default permissions in trac

Priority LOW 35

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01303 Published 2019-11-13 No fix listed CWE-276
Priority LOW 31

Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the q…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01834 Published 2008-07-27 Fixed in 0.10.5 CWE-601