PT-2008-6700 · Edgewall · Trac

Publicado 2008-12-17 · Atualizado 2022-05-17 · CVE-2008-5647

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Trac versions prior to 0.11.2

Description The issue allows attackers to conduct phishing attacks via unknown attack vectors due to an unspecified vulnerability in the HTML sanitizer filter.

Recommendations For versions prior to 0.11.2, update to version 0.11.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2008-5647

GHSA-WW53-WXXR-8F9W

PYSEC-2008-7

Produtos afetados

Trac

Referências · 15

• https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2008-7.yaml · Nota
• http://trac.edgewall.org/wiki/ChangeLog · Nota
• https://osv.dev/vulnerability/PYSEC-2008-7 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-5647 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5647 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-5647 · Aviso do Fabricante
• http://secunia.com/advisories/32652 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/3080 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5647 · Nota
• https://web.archive.org/web/20200228023138/http://securityfocus.com/bid/32226 · Nota
• https://osv.dev/vulnerability/CVE-2008-5647 · Aviso do Fabricante
• http://securityfocus.com/bid/32226 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46491 · Nota
• https://osv.dev/vulnerability/GHSA-ww53-wxxr-8f9w · Aviso do Fabricante
• https://web.archive.org/web/20140722200717/http://secunia.com/advisories/32652 · Nota