Vulnerability in Edgewall Software Trac
CVE-2007-1406
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.
EPSS: 0.013 (68.5th percentile) — read the EPSS interpretation.
Affected products
- Edgewall_software Trac — versions 0.10, 0.10.1, 0.10.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM)