tocsin

Debian/trac: unknown

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t

Action: Upgrade trac to 0.9.6-1 or later.

Affected

introducedfixedlast affected
00.9.6-1-

Fixed versions

0.9.6-1

Sources

published · modified · JSON