CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-03-10

Last modified

2024-09-16

Affected products

• Trac (Edgewall Software)

References

• http://trac.edgewall.org/wiki/ChangeLog