description: Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
problem types: Ticket Modification Workflow Permission Restriction Bypass
affected:
{
product: trac
vendor: trac
versions:
status: affected, version: 0.11.6
}