CVE:CVE-2008-5647
CNNVD:CNNVD-200812-339
Trac是Edgewall公司开发并维护的开放源码的网页界面专案管理、缺陷追踪软件。
Trac 0.11.2之前的版本的HTML sanitizer过滤器中存在未明漏洞。攻击者可以借助未知向量以造成钓鱼攻击。
solution:Upgrade trac trac to a higher version than *,0.11.2.1,0.5,0.5.1,0.5.2,0.6,0.6.1,0.7,0.7.1,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.9,0.9:b1,0.9:b2,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.10,0.10.1,0.10.2,0.10.3,0.10.3.1,0.10.4,0.10.5,0.11,0.11.2,and avoid the version (,0.11.2.1],0.5,0.5.1,0.5.2,0.6,0.6.1,0.7,0.7.1,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.9,0.9:b1,0.9:b2,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.10,0.10.1,0.10.2,0.10.3,0.10.3.1,0.10.4,0.10.5,0.11,0.11.2