Lucene search
GitHub Advisory DatabaseGHSA-W7X2-57F7-3P3XHistoryMay 01, 2022 - 5:53 p.m.
Trac Cross-site Scripting (XSS) vulnerability
2022-05-0117:53:21
CWE-79
GitHub Advisory Database
github.com
1
trac
xss
vulnerability
download
feature
remote attackers
web script
html
microsoft internet explorer
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.005
Percentile
75.9%
Cross-site scripting (XSS) vulnerability in the “download wiki page as text” feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected configurations
Node
tractracRange<0.10.3.1
References
Related
prion
prion
Cross site scripting
2007-03-10 22:19:00
cve
cve
CVE-2007-1405
2007-03-10 22:19:00
cvelist
cvelist
CVE-2007-1405
2007-03-10 22:00:00
debiancve
debiancve
CVE-2007-1405
2007-03-10 22:19:00
osv
osv
PYSEC-2007-2
2007-03-10 22:19:00
openvas
openvas
FreeBSD Ports: trac
2008-09-04 00:00:00
FreeBSD Ports: trac
2008-09-04 00:00:00
nvd
nvd
CVE-2007-1405
2007-03-10 22:19:00
ubuntucve
ubuntucve
CVE-2007-1405
2007-03-10 00:00:00
securityvulns
securityvulns
Trac content displaying vulnerability
2007-03-12 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.005
Percentile
75.9%
Related for GHSA-W7X2-57F7-3P3X