Launchpad.net

CVE 2008-5647

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.

CVE-2008-5647 (Candidate) is related to these bugs:

Bug #394290: Trac needs security fixes

		In	Importance	Status
394290	Trac needs security fixes	trac (Ubuntu)	Low	Fix Released
394290	Trac needs security fixes	trac (Ubuntu Dapper)	Low	Won't Fix
394290	Trac needs security fixes	trac (Ubuntu Hardy)	Low	Won't Fix
394290	Trac needs security fixes	trac (Ubuntu Karmic)	Low	Fix Released
394290	Trac needs security fixes	trac (Ubuntu Jaunty)	Low	Fix Released

See the

CVE page on Mitre.org for more details.