Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

trac

10 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
10
Registry
PyPI

Advisories 10

  • Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks…

    Affected: fixed in 0.11.6.

  • Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown…

    Affected: fixed in 0.11.2.

  • Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to…

    Affected: fixed in 0.11.2.

  • Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script…

    Affected: fixed in 0.10.5.

  • Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites…

    Affected: fixed in 0.10.5.

  • Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has…

    Affected: fixed in 0.10.3.1.

  • Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet…

    Affected: fixed in 0.10.3.1.

  • Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions…

    Affected: fixed in 0.11; fixed in 0.10.1.

  • Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text…

    Affected: fixed in 0.9.6.

  • Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web…

    Affected: fixed in 0.10; fixed in 0.9-stable.