Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:3.8.1:*:*:*:*:*:*:*

part: a version: 3.8.1 update: *

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:31.001848

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3374 vulnerable 2026-06-08 05:04:31.252169 Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3373 vulnerable 2026-06-08 05:04:31.250132 Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3372 vulnerable 2026-06-08 05:04:31.247936 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3371 vulnerable 2026-06-08 05:04:31.245262 Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3370 vulnerable 2026-06-08 05:04:31.243719 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T00:00:42.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3369 vulnerable 2026-06-08 05:04:31.241051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3368 vulnerable 2026-06-08 05:04:31.218824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4884 vulnerable 2026-06-08 05:02:53.079809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4734 vulnerable 2026-06-08 05:02:52.359372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4730 vulnerable 2026-06-08 05:02:52.313303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2769 not_vulnerable 2026-06-08 05:02:06.218884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5092 vulnerable 2026-06-08 04:59:34.559006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4460 vulnerable 2026-06-08 04:59:31.310064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4459 vulnerable 2026-06-08 04:59:31.286079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4458 vulnerable 2026-06-08 04:59:31.211370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2085 vulnerable 2026-06-08 04:58:03.867554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2084 vulnerable 2026-06-08 04:58:03.816444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2083 vulnerable 2026-06-08 04:58:03.810985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2082 vulnerable 2026-06-08 04:58:03.787583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1690 vulnerable 2026-06-08 04:58:01.474261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1689 vulnerable 2026-06-08 04:58:01.472943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1688 vulnerable 2026-06-08 04:58:01.470558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1687 vulnerable 2026-06-08 04:58:01.468948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1686 vulnerable 2026-06-08 04:58:01.466725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1685 vulnerable 2026-06-08 04:58:01.417047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1008 vulnerable 2026-06-08 04:56:40.729665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1007 vulnerable 2026-06-08 04:56:40.721750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0009 vulnerable 2026-06-08 04:56:33.121311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4151 vulnerable 2026-06-08 04:51:47.421462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3892 vulnerable 2026-06-08 04:51:44.943244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3585 vulnerable 2026-06-08 04:51:42.758490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.