~ / search / GHSA-rcmj-xp8f-f6q4

GHSA-rcmj-xp8f-f6q4

Trac Open Redirect vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2008-2951

Packages

EcosystemPackageAffectedFixed in
PyPI trac < 0.10.5 0.10.5

Details

As written in the advisory (Markdown source, shown as plain text).

Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

References

External links from the advisory. They lead to third-party sites.