Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:3.8.2:*:*:*:*:*:*:*

part: a version: 3.8.2 update: *

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:31.001876

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3374 vulnerable 2026-06-08 05:04:31.252285 Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3373 vulnerable 2026-06-08 05:04:31.250249 Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3372 vulnerable 2026-06-08 05:04:31.248049 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3371 vulnerable 2026-06-08 05:04:31.245376 Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3370 vulnerable 2026-06-08 05:04:31.243830 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T00:00:42.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3369 vulnerable 2026-06-08 05:04:31.241174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3368 vulnerable 2026-06-08 05:04:31.222332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4884 vulnerable 2026-06-08 05:02:53.079928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4734 vulnerable 2026-06-08 05:02:52.359490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4730 vulnerable 2026-06-08 05:02:52.316753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2769 not_vulnerable 2026-06-08 05:02:06.221827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5092 vulnerable 2026-06-08 04:59:34.559103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4460 vulnerable 2026-06-08 04:59:31.310168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4459 vulnerable 2026-06-08 04:59:31.286183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4458 vulnerable 2026-06-08 04:59:31.214723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2085 vulnerable 2026-06-08 04:58:03.867678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2084 vulnerable 2026-06-08 04:58:03.816569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2083 vulnerable 2026-06-08 04:58:03.811111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2082 vulnerable 2026-06-08 04:58:03.791677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1690 vulnerable 2026-06-08 04:58:01.474278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1689 vulnerable 2026-06-08 04:58:01.472961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1688 vulnerable 2026-06-08 04:58:01.470575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1687 vulnerable 2026-06-08 04:58:01.468967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1686 vulnerable 2026-06-08 04:58:01.466746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1685 vulnerable 2026-06-08 04:58:01.417546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1008 vulnerable 2026-06-08 04:56:40.729681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1007 vulnerable 2026-06-08 04:56:40.721767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0009 vulnerable 2026-06-08 04:56:33.124256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4151 vulnerable 2026-06-08 04:51:47.421479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3892 vulnerable 2026-06-08 04:51:44.943261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3585 vulnerable 2026-06-08 04:51:42.758958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.