RSS   Vulnerabilities for 'TRAC'   RSS

2019-11-13
 
CVE-2010-5108

CWE-276
 

 
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.

 
2009-12-23
 
CVE-2009-4405

CWE-noinfo
 

 
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

 

 >>> Vendor: Edgewall 2 Products
TRAC
Firestats


Copyright 2024, cxsecurity.com

 

Back to Top