CVE-2006-3695

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from…

published July 19, 2006

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01899 · 79.5th percentile
Published
2006-07-19T01:00Z
EPSS history
Timeline
  • 19 JUL 01:00Z
    Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from…
    cvelistv5