Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:3.8.6:rc1:*:*:*:*:*:*

part: a version: 3.8.6 update: rc1

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:31.001890

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3374 vulnerable 2026-06-08 05:04:31.252450 Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3373 vulnerable 2026-06-08 05:04:31.250418 Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3372 vulnerable 2026-06-08 05:04:31.248220 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3371 vulnerable 2026-06-08 05:04:31.245538 Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3370 vulnerable 2026-06-08 05:04:31.243997 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T00:00:42.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3369 vulnerable 2026-06-08 05:04:31.241346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3368 vulnerable 2026-06-08 05:04:31.227524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4884 vulnerable 2026-06-08 05:02:53.080098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4734 vulnerable 2026-06-08 05:02:52.359654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4730 vulnerable 2026-06-08 05:02:52.321988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2769 not_vulnerable 2026-06-08 05:02:06.227384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5092 vulnerable 2026-06-08 04:59:34.559343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4460 vulnerable 2026-06-08 04:59:31.310332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4459 vulnerable 2026-06-08 04:59:31.286448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4458 vulnerable 2026-06-08 04:59:31.220584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2085 vulnerable 2026-06-08 04:58:03.867886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2084 vulnerable 2026-06-08 04:58:03.816776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2083 vulnerable 2026-06-08 04:58:03.811325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2082 vulnerable 2026-06-08 04:58:03.796183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1690 vulnerable 2026-06-08 04:58:01.474364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1689 vulnerable 2026-06-08 04:58:01.473048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1688 vulnerable 2026-06-08 04:58:01.470664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1687 vulnerable 2026-06-08 04:58:01.469059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1686 vulnerable 2026-06-08 04:58:01.466846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1685 vulnerable 2026-06-08 04:58:01.420770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1008 vulnerable 2026-06-08 04:56:40.729761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1007 vulnerable 2026-06-08 04:56:40.721851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0009 vulnerable 2026-06-08 04:56:33.129411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.