CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2008-2951
Medium (6.1). EPSS 1.8% chance of exploitation in the next 30 days. Fixed in trac 0.10.5.
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-601
- Published
- Modified
- Record from
- the NVD, synced
Affected
- edgewall:trac
- fedoraproject:fedora
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rcmj-xp8f-f6q4 | PyPI | trac | <0.10.5 | 0.10.5 |
| PYSEC-2008-4 | PyPI | trac | <0.10.5 | 0.10.5 |