{"action":"Upgrade trac to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"trac","cve_ids":["CVE-2006-5878"],"ecosystem":"PyPI","epss":0.02216,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-2q26-r8c4-jfx5","id":"tcs_01M5KET0KK86A5P304F73KY4EM","modified_at":"2024-11-18T20:58:45.131206Z","published_at":"2022-05-01T07:32:37Z","references":["https://osv.dev/vulnerability/GHSA-2q26-r8c4-jfx5","https://nvd.nist.gov/vuln/detail/CVE-2006-5878","https://exchange.xforce.ibmcloud.com/vulnerabilities/30146","https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-3.yaml","https://web.archive.org/web/20140724015143/http://secunia.com/advisories/23357","https://web.archive.org/web/20140724111033/http://secunia.com/advisories/22868","https://web.archive.org/web/20140801133247/http://secunia.com/advisories/22789","http://security.gentoo.org/glsa/glsa-200612-14.xml","http://trac.edgewall.org/ticket/4049","http://trac.edgewall.org/wiki/ChangeLog","http://www.debian.org/security/2006/dsa-1209"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2q26-r8c4-jfx5","url":"https://osv.dev/vulnerability/GHSA-2q26-r8c4-jfx5"}],"summary":"Edgewall Trac Cross-site request forgery (CSRF) vulnerability"}