Edgewall Trac vulnerabilities

CVE-2010-5108 [HIGH] CWE-276 CVE-2010-5108: Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be expl Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.

CVE-2009-4405 [HIGH] CVE-2009-4405: Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, p Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."

CVE-2008-2951 [MEDIUM] CWE-601 CVE-2008-2951: Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to re Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.