CVE-2008-5647: Trac

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.

Affected products

• Trac Trac: any version; up to and including 0.11.2.1; version 0.5 only; version 0.5.1 only; version 0.5.2 only; version 0.6 only; …

Published 2008-12-17. Last modified 2026-06-16.