Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2022/05/01 5:53 p.m.•24 views

GHSA-7JJR-3R8R-9PCF Trac missing Content-Disposition HTTP header

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

6.9CVSS6.4AI score0.01411EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2007/03/10 10:00 p.m.•52 views

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

10CVSS5.8AI score0.01411EPSS
SaveExploits0
Rows per page
Query Builder