Vulnerability in Edgewall Software Trac

CVE-2005-2007

Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.

EPSS: 0.018 (76.1th percentile) — read the EPSS interpretation.

Affected products

Edgewall_software Trac — versions 0.5, 0.5.1, 0.5.2
N/a — versions n/a

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, Patch, x_refsource_FULLDISC)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM)