GitHub Advisoryadvisory · PyPI
GHSA-f9qv-j5g6-g5cr Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils
HIGH
Official page ↗
- Aliases
- CVE-2009-4405
- Ecosystem
- PyPI
- Packages
- trac
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Reviewed
- 2024-04-29
Affected packages
• PyPI trac: < 0.11.6 → fixed in 0.11.6
Description
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."
Related
Alias · CVE (1)
- CVE-2009-4405 Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2009-4405 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=542394 web
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54983 web
- https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2009-7.yaml web
- https://web.archive.org/web/20130417170303/http://secunia.com/advisories/37901 web
- https://web.archive.org/web/20130513235205/http://secunia.com/advisories/37807 web
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html web
- http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE web