CVE-2008-2951: Input Validation
Published Jul 27, 2008
·Updated
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.
Affected Software
31 affected componentsFixes available
Trac Trac=0.8
Trac Trac=0.9
Trac Trac=0.8.3
Trac Trac=0.5.2
Trac Trac=0.9.3
Trac Trac=0.10
Trac Trac=0.6
Trac Trac=0.5.1
Trac Trac=0.7.1
Trac Trac=0.5
Trac Trac=0.8.2
Trac Trac<=0.10.4
Trac Trac=0.9.4
Trac Trac=0.9-b2
Trac Trac=0.9.6
Trac Trac=0.6.1
Trac Trac=0.10.3.1
Trac Trac=0.9.1
Trac Trac=0.10.3
Trac Trac=0.8.4
Trac Trac=0.10.1
Trac Trac=0.9-b1
Trac Trac=0.10.2
Trac Trac=0.8.1
Trac Trac=0.9.5
Trac Trac=0.7
Trac Trac=0.9.2
edgewall trac<0.10.5
Fedoraproject Fedora=8
Fedoraproject Fedora=9
pip/trac<0.10.5
0.10.5
Event History
Jul 27, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:41 PM
DescriptionSeverityWeaknessAffected Software
May 1, 2022
Advisory Published
via GitHub·11:55 PM
Data Sourced
via GitHub·11:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-2951?
CVE-2008-2951 is classified as a medium severity vulnerability due to its potential for exploitation in phishing attacks.
2
How do I fix CVE-2008-2951?
To fix CVE-2008-2951, upgrade Trac to version 0.10.5 or later.
3
What type of vulnerability is CVE-2008-2951?
CVE-2008-2951 is an open redirect vulnerability.
4
Which versions of Trac are affected by CVE-2008-2951?
CVE-2008-2951 affects Trac versions prior to 0.10.5.
5
What can attackers do with CVE-2008-2951?
Attackers can use CVE-2008-2951 to redirect users to arbitrary websites, which can facilitate phishing attacks.