PatchTheCVEedgewall software vulnerabilities
Recent CVEs affecting edgewall software products. 3 tracked.
edgewall software has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-07-27. Highest priority: CVE-2007-1406 (score 53/100).
- CVE-2008-3328 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to i
- CVE-2007-1406 HIGH 10.0 DOWNGRADE Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsa
- CVE-2007-1405 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1,
FAQ
How do I fix edgewall software vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edgewall software being exploited right now?
None of the tracked edgewall software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edgewall software CVE should I patch first?
CVE-2007-1406 currently ranks highest (53/100): Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsa.