Описание
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| trac | fixed | 0.10.3-1etch1 | etch | package |
| trac | fixed | 0.10.4-1 | package |
Примечания
Browser bug, only exploitable on IE, still fixed in a point release
Связанные уязвимости
ubuntu
почти 19 лет назад
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
nvd
почти 19 лет назад
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
