PyPI/trac CVE-2005-4644: medium 6.1, EPSS 1.52%

Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

Action: Upgrade trac to 0.9-stable or later.

pip install trac==0.9-stable

Affected

Fixed versions

Sources

• osv: GHSA-6vhp-hp77-6w52
• https://nvd.nist.gov/vuln/detail/CVE-2005-4644
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24183
• https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2005-1.yaml
• https://web.archive.org/web/20140722192945/http://secunia.com/advisories/18465
• https://web.archive.org/web/20151104154255/http://secunia.com/advisories/18555
• https://web.archive.org/web/20200302063657/http://www.securityfocus.com/bid/16198
• http://projects.edgewall.com/trac/ticket/2473
• http://trac.edgewall.org/ticket/2473
• http://www.debian.org/security/2006/dsa-951

CVE-2005-4644 · published 2022-05-01T02:29:20Z · modified 2024-11-18T20:49:45Z · JSON