Improper Access Control Affecting trac package, versions [,0.12)
Threat Intelligence
EPSS
0.58% (79th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-TRAC-6730113
- published 30 Apr 2024
- disclosed 2 May 2022
- credit Unknown
Introduced: 2 May 2022
CVE-2009-4405 Open this link in a new tabHow to fix?
Upgrade Trac to version 0.12 or higher.
Overview
Trac is an Integrated SCM, wiki, issue tracker and project environment
Affected versions of this package are vulnerable to Improper Access Control due to improper policy checks and a missing 'raw' role check in docutils. An attacker can exploit these vulnerabilities by leveraging the unspecified attack vectors related to policy checks in report results when using alternate formats or the absence of a 'raw' role check.
References
CVSS Scores
version 3.1