VYPR
← All advisories
Moderate severityNVD Advisory· Published Mar 10, 2007· Updated Apr 23, 2026

CVE-2007-1406

CVE-2007-1406

Description

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
tracPyPI
< 0.10.3.10.10.3.1

Affected products

4
  • Edgewall Software/Trac4 versions
    cpe:2.3:a:edgewall_software:trac:0.10:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:edgewall_software:trac:0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:edgewall_software:trac:0.10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:edgewall_software:trac:0.10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:edgewall_software:trac:0.10.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.