tocsin

Debian/trac: high 7.5

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permission

Action: Upgrade trac to 0.11.7-1 or later.

Affected

introducedfixedlast affected
00.11.7-1-

Fixed versions

0.11.7-1

Sources

published · modified · JSON