GHSA-2q26-r8c4-jfx5

Edgewall Trac Cross-site request forgery (CSRF) vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2006-5878

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	trac	< 0.10.1	0.10.1

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2006-5878 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30146 web
https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-3.yaml web
https://web.archive.org/web/20140724015143/http://secunia.com/advisories/23357 web
https://web.archive.org/web/20140724111033/http://secunia.com/advisories/22868 web
https://web.archive.org/web/20140801133247/http://secunia.com/advisories/22789 web
http://security.gentoo.org/glsa/glsa-200612-14.xml web
http://trac.edgewall.org/ticket/4049 web
http://trac.edgewall.org/wiki/ChangeLog web
http://www.debian.org/security/2006/dsa-1209 web