Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

PublishedMar 10, 2007, 22:19

Published Bycve@mitre.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

trac(PyPI)00.10.3.1N/A

References

http://trac.edgewall.org/wiki/ChangeLog

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:C/I:C/A:C

Base SeverityUnknown

Version

2.0

Attack Vector (AV)