Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Edgewall Subscribe
Filtered by product Trac
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-5108 2 Debian, Edgewall 2 Debian Linux, Trac 2019-11-18 5.0 MEDIUM 7.5 HIGH
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
CVE-2009-4405 1 Edgewall 1 Trac 2017-08-16 7.5 HIGH N/A
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."