PYSEC-2007-3

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/trac/PYSEC-2007-3.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2007-3
Aliases
Published
2007-03-10T22:19:00Z
Modified
2024-04-29T15:11:32.354468Z
Summary
[none]
Details

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

References

Affected packages

PyPI / trac

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.3.1

Affected versions

0.*

0.8.4
0.9
0.10