CVE-2008-3328: XSS
Published Jul 27, 2008
·Updated
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
29 affected componentsFixes available
pip/trac<0.10.5
0.10.5
Edgewall Software Trac<=0.10.4
Edgewall Software Trac=0.5
Edgewall Software Trac=0.5.1
Edgewall Software Trac=0.5.2
Edgewall Software Trac=0.6
Edgewall Software Trac=0.6.1
Edgewall Software Trac=0.7
Edgewall Software Trac=0.7.1
Edgewall Software Trac=0.8
Edgewall Software Trac=0.8.1
Edgewall Software Trac=0.8.2
Edgewall Software Trac=0.8.3
Edgewall Software Trac=0.8.4
Edgewall Software Trac=0.9
Edgewall Software Trac=0.9.1
Edgewall Software Trac=0.9.2
Edgewall Software Trac=0.9.3
Edgewall Software Trac=0.9.4
Edgewall Software Trac=0.9.5
Edgewall Software Trac=0.9.6
Edgewall Software Trac=0.9b1
Edgewall Software Trac=0.9b2
Edgewall Software Trac=0.10
Edgewall Software Trac=0.10.1
Edgewall Software Trac=0.10.2
Edgewall Software Trac=0.10.3
Edgewall Software Trac=0.10.3.1
Edgewall Software Trac=0.50.9
Event History
Jul 27, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
May 1, 2022
Advisory Published
via GitHub·11:59 PM
Frequently Asked Questions
1
What is the severity of CVE-2008-3328?
CVE-2008-3328 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-3328?
To fix CVE-2008-3328, upgrade the Trac software to version 0.10.5 or later.
3
What type of vulnerability is CVE-2008-3328?
CVE-2008-3328 is a cross-site scripting (XSS) vulnerability.
4
Which versions of Trac are affected by CVE-2008-3328?
CVE-2008-3328 affects Trac versions prior to 0.10.5.
5
Can CVE-2008-3328 lead to data breaches?
Yes, CVE-2008-3328 can allow attackers to inject malicious scripts, which may lead to data breaches.