What is GHSA-2q26-r8c4-jfx5?

GHSA-2q26-r8c4-jfx5 is a security advisory published by GitHub Security Advisories with High severity. Edgewall Trac Cross-site request forgery (CSRF) vulnerability

Which CVE IDs does GHSA-2q26-r8c4-jfx5 cover?

GHSA-2q26-r8c4-jfx5 covers the following CVE IDs: CVE-2006-5878. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2q26-r8c4-jfx5?

GHSA-2q26-r8c4-jfx5 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-2q26-r8c4-jfx5?

GHSA-2q26-r8c4-jfx5 affects 1 product, including: pip/trac:\u003c 0.10.1.

GHSA-2q26-r8c4-jfx5HighCVSS 7.5

Edgewall Trac Cross-site request forgery (CSRF) vulnerability

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

November 18, 2024

🔗 CVE IDs covered (1)

CVE-2006-5878 →

📋 Description

Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

🎯 Affected products1

pip/trac:< 0.10.1

🔗 References (11)

https://nvd.nist.gov/vuln/detail/CVE-2006-5878
https://exchange.xforce.ibmcloud.com/vulnerabilities/30146
http://security.gentoo.org/glsa/glsa-200612-14.xml
http://trac.edgewall.org/ticket/4049
http://trac.edgewall.org/wiki/ChangeLog
http://www.debian.org/security/2006/dsa-1209
https://web.archive.org/web/20140724015143/http://secunia.com/advisories/23357
https://web.archive.org/web/20140724111033/http://secunia.com/advisories/22868
https://web.archive.org/web/20140801133247/http://secunia.com/advisories/22789
https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-3.yaml
https://github.com/advisories/GHSA-2q26-r8c4-jfx5