What is GHSA-w7x2-57f7-3p3x?

GHSA-w7x2-57f7-3p3x is a security advisory published by GitHub Security Advisories with Medium severity. Trac Cross-site Scripting (XSS) vulnerability

Which CVE IDs does GHSA-w7x2-57f7-3p3x cover?

GHSA-w7x2-57f7-3p3x covers the following CVE IDs: CVE-2007-1405. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w7x2-57f7-3p3x?

GHSA-w7x2-57f7-3p3x has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-w7x2-57f7-3p3x?

GHSA-w7x2-57f7-3p3x affects 1 product, including: pip/trac:\u003c 0.10.3.1.

GHSA-w7x2-57f7-3p3xMediumCVSS 6.1

Trac Cross-site Scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

November 18, 2024

🔗 CVE IDs covered (1)

CVE-2007-1405 →

📋 Description

Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

🎯 Affected products1

pip/trac:< 0.10.3.1

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2007-1405
https://exchange.xforce.ibmcloud.com/vulnerabilities/32897
http://trac.edgewall.org/wiki/ChangeLog
https://web.archive.org/web/20080801205940/http://secunia.com/advisories/24470
https://web.archive.org/web/20200228104401/http://www.securityfocus.com/bid/22888
https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2007-2.yaml
https://github.com/advisories/GHSA-w7x2-57f7-3p3x