GitHub Advisoryadvisory · PyPI

GHSA-w7x2-57f7-3p3x Trac Cross-site Scripting (XSS) vulnerability

MEDIUM Published 2022-05-01 Modified 2024-11-18 Official page ↗
Aliases
CVE-2007-1405
Ecosystem
PyPI
Packages
trac
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2024-04-29

Affected packages

• PyPI trac: < 0.10.3.1 → fixed in 0.10.3.1

Description

Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Related

Alias · CVE (1)

  • CVE-2007-1405 Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References