What is GHSA-x6jf-c7wh-7m7w?

GHSA-x6jf-c7wh-7m7w is a security advisory published by GitHub Security Advisories with Medium severity. Trac Cross-site Scripting (XSS) vulnerability

Which CVE IDs does GHSA-x6jf-c7wh-7m7w cover?

GHSA-x6jf-c7wh-7m7w covers the following CVE IDs: CVE-2008-3328. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x6jf-c7wh-7m7w?

GHSA-x6jf-c7wh-7m7w has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-x6jf-c7wh-7m7w?

GHSA-x6jf-c7wh-7m7w affects 1 product, including: pip/trac:\u003c 0.10.5.

GHSA-x6jf-c7wh-7m7wMediumCVSS 6.1

Trac Cross-site Scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

November 18, 2024

🔗 CVE IDs covered (1)

CVE-2008-3328 →

📋 Description

Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

🎯 Affected products1

pip/trac:< 0.10.5

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2008-3328
https://exchange.xforce.ibmcloud.com/vulnerabilities/44016
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html
http://trac.edgewall.org/wiki/ChangeLog
https://web.archive.org/web/20140802031359/http://secunia.com/advisories/31231
https://web.archive.org/web/20140802170545/http://secunia.com/advisories/31314
https://web.archive.org/web/20200516112903/http://www.securityfocus.com/bid/30400
https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2008-5.yaml
https://github.com/advisories/GHSA-x6jf-c7wh-7m7w