PyPI/trac CVE-2006-3695: unknown, EPSS 1.90%
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Action: Upgrade trac to 0.9.6 or later.
pip install trac==0.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.6 | - |
Fixed versions
| 0.9.6 |
Sources
- osv: PYSEC-2006-2
- http://trac.edgewall.org/wiki/ChangeLog
- http://securitytracker.com/id?1016457
- http://www.debian.org/security/2006/dsa-1152
- http://secunia.com/advisories/20958
- http://secunia.com/advisories/21534
- http://www.securityfocus.com/bid/18323
- http://www.vupen.com/english/advisories/2006/2729
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
- https://github.com/advisories/GHSA-r524-c2gf-5chr
CVE-2006-3695 · published · modified · JSON