TracksApp/tracks

TracksApp/tracks

GitHubGitHub
GitHubgithub.com
www.getontracks.orgwww.getontracks.org
Releases36
Frequency5 months 2 weeks
Last Release
Stars1.23K
Tracks is a GTD™ web application, built with Ruby on Rails
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-41805↗
6.1 MEDIUM—

Tracks, a Getting Things Done (GTD) web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing attacks that could lead to credential theft. Tracks version 2.7.1 is patched. No known complete workarounds are available.