Description
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
References (9)
Core 9
Core References
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200612-14.xml
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/22789
Patch vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1209
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23357
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4422
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30146
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/22868
Various Sources x_refsource_misc
http://trac.edgewall.org/ticket/4049
Patch x_refsource_confirm
http://trac.edgewall.org/wiki/ChangeLog
Scores
EPSS
0.0211
EPSS Percentile
79.8%
Details
Status
published
Products (24)
edgewall_software/trac
0.5
edgewall_software/trac
0.5.1
edgewall_software/trac
0.5.2
edgewall_software/trac
0.6
edgewall_software/trac
0.6.1
edgewall_software/trac
0.7
edgewall_software/trac
0.7.1
edgewall_software/trac
0.8
edgewall_software/trac
0.8.1
edgewall_software/trac
0.8.2
... and 14 more
Published
Nov 14, 2006
Tracked Since
Feb 18, 2026