{"id":"CVE-2007-1406","details":"Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain \"unsafe\" situations, which has unknown impact and remote attack vectors.","aliases":["GHSA-7jjr-3r8r-9pcf","PYSEC-2007-3"],"modified":"2026-04-10T03:38:47.737871Z","published":"2007-03-10T22:19:00Z","references":[{"type":"WEB","url":"http://trac.edgewall.org/wiki/ChangeLog"}],"schema_version":"1.7.5"}