~ / search / GHSA-f9qv-j5g6-g5cr

GHSA-f9qv-j5g6-g5cr

Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils

Source: GitHub Advisory Database (reviewed) High CVE-2009-4405

Packages

EcosystemPackageAffectedFixed in
PyPI trac < 0.11.6 0.11.6

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

References

External links from the advisory. They lead to third-party sites.