GitHub Advisoryadvisory · PyPI

GHSA-6vhp-hp77-6w52 Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

MEDIUM Published 2022-05-01 Modified 2024-11-18 Official page ↗
Aliases
CVE-2005-4644
Ecosystem
PyPI
Packages
trac
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2024-04-29

Affected packages

• PyPI trac: < 0.9-stable → fixed in 0.9-stable

Description

Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.

Related

Alias · CVE (1)

  • CVE-2005-4644 Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References