Trac is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Versions prior to Trac 0.11.7 are vulnerable.

The vendor has released an update. Please see the references for details.

• http://trac.edgewall.org/
• http://www.securityfocus.com/bid/39040

---

Updated on 2017-03-28