{"action":"Upgrade trac to 0.10.3.1 or later.","affected":[{"fixed":"0.10.3.1","introduced":"0"}],"component":"trac","cve_ids":["CVE-2007-1405"],"ecosystem":"PyPI","epss":0.01145,"exploited":false,"fixed_versions":["0.10.3.1"],"ghsa_id":"GHSA-w7x2-57f7-3p3x","id":"tcs_01M5KG1R4SGD5Y82N6CACC3F2D","modified_at":"2024-11-29T05:38:39.733787Z","published_at":"2022-05-01T17:53:21Z","references":["https://osv.dev/vulnerability/GHSA-w7x2-57f7-3p3x","https://nvd.nist.gov/vuln/detail/CVE-2007-1405","https://exchange.xforce.ibmcloud.com/vulnerabilities/32897","https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2007-2.yaml","https://web.archive.org/web/20080801205940/http://secunia.com/advisories/24470","https://web.archive.org/web/20200228104401/http://www.securityfocus.com/bid/22888","http://trac.edgewall.org/wiki/ChangeLog"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-w7x2-57f7-3p3x","url":"https://osv.dev/vulnerability/GHSA-w7x2-57f7-3p3x"}],"summary":"Trac Cross-site Scripting (XSS) vulnerability"}