CyberSec.Space Logo
Back to CVE Browser

CVE-2006-5878

HIGH
7.5
CVSS Severity Score
EPSS Score0.0410%
EPSS Percentile30.07th
PublishedNov 14, 2006
Last ModifiedApr 23, 2026

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

Affected Platforms (CPE)

📦
Edgewall Software

Trac

<= 0.10
📦
Edgewall Software

Trac

= 0.5
📦
Edgewall Software

Trac

= 0.5.1
📦
Edgewall Software

Trac

= 0.5.2
📦
Edgewall Software

Trac

= 0.6
📦
Edgewall Software

Trac

= 0.6.1
📦
Edgewall Software

Trac

= 0.7
📦
Edgewall Software

Trac

= 0.7.1
📦
Edgewall Software

Trac

= 0.8
📦
Edgewall Software

Trac

= 0.8.1
📦
Edgewall Software

Trac

= 0.8.2
📦
Edgewall Software

Trac

= 0.8.3
📦
Edgewall Software

Trac

= 0.8.4
📦
Edgewall Software

Trac

= 0.9
📦
Edgewall Software

Trac

= 0.9.1
📦
Edgewall Software

Trac

= 0.9.2
📦
Edgewall Software

Trac

= 0.9.3
📦
Edgewall Software

Trac

= 0.9.4
📦
Edgewall Software

Trac

= 0.9.5
📦
Edgewall Software

Trac

= 0.9.6
📦
Edgewall Software

Trac

= 0.9b1
📦
Edgewall Software

Trac

= 0.9b2
📦
Edgewall Software

Trac

= 0.50.9

References & Advisories

🔗 http://secunia.com/advisories/22789
🔗 http://secunia.com/advisories/22868
🔗 http://secunia.com/advisories/23357
🔗 http://security.gentoo.org/glsa/glsa-200612-14.xml
🔗 http://trac.edgewall.org/ticket/4049
🔗 http://trac.edgewall.org/wiki/ChangeLog
🔗 http://www.debian.org/security/2006/dsa-1209
🔗 http://www.vupen.com/english/advisories/2006/4422

Related Vulnerabilities

CVE-2007-140610.0

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, whic...

CVE-2019-10030678.8

Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewe...

CVE-2005-40657.5

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL co...

CVE-2005-39807.5

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execut...