CVE-2007-1406: Edgewall Software Trac

High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

Affected products

• Edgewall Software Trac: version 0.10 only; version 0.10.1 only; version 0.10.2 only; version 0.10.3 only

Published 2007-03-10. Last modified 2026-06-16.