id: PYSEC-2006-3
details: Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and
  earlier allows remote attackers to perform unauthorized actions as other users via
  unknown vectors.
affected:
- package:
    name: trac
    ecosystem: PyPI
    purl: pkg:pypi/trac
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: "0.11"
  versions:
  - "0.10"
  - 0.8.4
  - "0.9"
references:
- type: WEB
  url: http://trac.edgewall.org/wiki/ChangeLog
- type: ADVISORY
  url: http://www.debian.org/security/2006/dsa-1209
- type: ADVISORY
  url: http://secunia.com/advisories/22789
- type: ADVISORY
  url: http://secunia.com/advisories/22868
- type: WEB
  url: http://trac.edgewall.org/ticket/4049
- type: ADVISORY
  url: http://security.gentoo.org/glsa/glsa-200612-14.xml
- type: ADVISORY
  url: http://secunia.com/advisories/23357
- type: ADVISORY
  url: http://www.vupen.com/english/advisories/2006/4422
- type: WEB
  url: https://exchange.xforce.ibmcloud.com/vulnerabilities/30146
- type: ADVISORY
  url: https://github.com/advisories/GHSA-2q26-r8c4-jfx5
aliases:
- CVE-2006-5878
- GHSA-2q26-r8c4-jfx5
modified: "2021-07-16T01:31:34.062903Z"
published: "2006-11-14T19:07:00Z"