{"action":"Upgrade trac to 0.9-stable or later.","affected":[{"fixed":"0.9-stable","introduced":"0"}],"component":"trac","cve_ids":["CVE-2005-4644"],"ecosystem":"PyPI","epss":0.01523,"exploited":false,"fixed_versions":["0.9-stable"],"ghsa_id":"GHSA-6vhp-hp77-6w52","id":"tcs_01M5KF47E9FC3ZX0RT2DQN13HG","modified_at":"2024-11-18T20:49:45Z","published_at":"2022-05-01T02:29:20Z","references":["https://osv.dev/vulnerability/GHSA-6vhp-hp77-6w52","https://nvd.nist.gov/vuln/detail/CVE-2005-4644","https://exchange.xforce.ibmcloud.com/vulnerabilities/24183","https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2005-1.yaml","https://web.archive.org/web/20140722192945/http://secunia.com/advisories/18465","https://web.archive.org/web/20151104154255/http://secunia.com/advisories/18555","https://web.archive.org/web/20200302063657/http://www.securityfocus.com/bid/16198","http://projects.edgewall.com/trac/ticket/2473","http://trac.edgewall.org/ticket/2473","http://www.debian.org/security/2006/dsa-951"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6vhp-hp77-6w52","url":"https://osv.dev/vulnerability/GHSA-6vhp-hp77-6w52"}],"summary":"Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability"}