Skip to content
OpenAdvisories

Package · Debian

trac

17 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.5

    Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils

    Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

  • High 7.5

    Trac vulnerable to denial of service

    Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."

  • High 7.5

    Edgewall Trac Cross-site request forgery (CSRF) vulnerability

    Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.