CVE-2008-2951: Edgewall Trac

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

Affected products

• Edgewall Trac: before 0.10.5 (fixed in 0.10.5)
• Fedoraproject Fedora: version 8 only; version 9 only

Published 2008-07-27. Last modified 2026-06-16.