Homepage

Trac@0.11 vulnerabilities

Integrated SCM, wiki, issue tracker and project environment

  • latest version

    1.6

  • latest non vulnerable version

    1.6

  • first published

    16 years ago

  • latest version published

    1 years ago

  • licenses detected

  • View Trac package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the Trac package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Improper Access Control

    Trac is an Integrated SCM, wiki, issue tracker and project environment

    Affected versions of this package are vulnerable to Improper Access Control due to improper policy checks and a missing 'raw' role check in docutils. An attacker can exploit these vulnerabilities by leveraging the unspecified attack vectors related to policy checks in report results when using alternate formats or the absence of a 'raw' role check.

    How to fix Improper Access Control?

    Upgrade Trac to version 0.12 or higher.

    [,0.12)
    • M
    Open Redirect

    Trac is an Integrated SCM, wiki, issue tracker and project environment

    Affected versions of this package are vulnerable to Open Redirect via the HTML sanitizer filter, which allows attackers to conduct phishing attacks via unknown attack vectors.

    How to fix Open Redirect?

    Upgrade Trac to version 0.11.2 or higher.

    [,0.11.2)
    • H
    Denial of Service (DoS)

    Trac is an Integrated SCM, wiki, issue tracker and project environment

    Affected versions of this package are vulnerable to Denial of Service (DoS) via unknown attack vectors related to "certain wiki markup."

    How to fix Denial of Service (DoS)?

    Upgrade Trac to version 0.12 or higher.

    [,0.12)
    Go back to all versions of this package