CVE-2005-4644: XSS
Published Dec 31, 2005
·Updated
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
Affected Software
2 affected componentsFixes available
pip/trac<0.9-stable
0.9-stable
Edgewall Software Trac=0.9.2
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Jan 12, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
May 1, 2022
Advisory Published
via GitHub·02:29 AM
Frequently Asked Questions
1
What is the severity of CVE-2005-4644?
CVE-2005-4644 has a medium severity due to its potential to allow remote attackers to execute arbitrary scripts.
2
How do I fix CVE-2005-4644?
To fix CVE-2005-4644, upgrade Edgewall Trac to version 0.9.3 or later.
3
What types of attacks can CVE-2005-4644 enable?
CVE-2005-4644 can enable cross-site scripting (XSS) attacks, potentially compromising user sessions and data.
4
Which versions of Trac are affected by CVE-2005-4644?
CVE-2005-4644 affects Edgewall Trac version 0.9.2 and earlier.
5
Is there a workaround for CVE-2005-4644?
A temporary workaround for CVE-2005-4644 is to sanitize user inputs that contain IMG tags to prevent script injection.