Skip to content
OpenAdvisories
Unscored DSA-739-1 1 CVE

trac - missing input sanitising

Published Jul 6, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 trac 0.8.1-3sarge2

Vulnerabilities 1

  • Unscored —

    Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to …