Vulnerability Details CVE-2010-5108
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.openwall.com/lists/oss-security/2013/02/13/2
- https://access.redhat.com/security/cve/cve-2010-5108
- https://security-tracker.debian.org/tracker/CVE-2010-5108
- http://www.openwall.com/lists/oss-security/2013/02/13/2
- https://access.redhat.com/security/cve/cve-2010-5108
- https://security-tracker.debian.org/tracker/CVE-2010-5108
Products affected by CVE-2010-5108
-
cpe:2.3:a:edgewall:trac:0.11.6
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0