Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:3.8.8:rc4:*:*:*:*:*:*

part: a version: 3.8.8 update: rc4

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:31.001898

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3374 vulnerable 2026-06-08 05:04:31.252546 Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3373 vulnerable 2026-06-08 05:04:31.250514 Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3372 vulnerable 2026-06-08 05:04:31.248318 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3371 vulnerable 2026-06-08 05:04:31.245643 Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3370 vulnerable 2026-06-08 05:04:31.244094 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T00:00:42.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3369 vulnerable 2026-06-08 05:04:31.241445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3368 vulnerable 2026-06-08 05:04:31.230601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4884 vulnerable 2026-06-08 05:02:53.080210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4734 vulnerable 2026-06-08 05:02:52.359755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4730 vulnerable 2026-06-08 05:02:52.325413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2769 not_vulnerable 2026-06-08 05:02:06.230845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5092 vulnerable 2026-06-08 04:59:34.559444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4460 vulnerable 2026-06-08 04:59:31.310436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4459 vulnerable 2026-06-08 04:59:31.286552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4458 vulnerable 2026-06-08 04:59:31.223970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2085 vulnerable 2026-06-08 04:58:03.868008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2084 vulnerable 2026-06-08 04:58:03.816902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2083 vulnerable 2026-06-08 04:58:03.811451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2082 vulnerable 2026-06-08 04:58:03.796321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1690 vulnerable 2026-06-08 04:58:01.474474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1689 vulnerable 2026-06-08 04:58:01.473159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1688 vulnerable 2026-06-08 04:58:01.470772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1687 vulnerable 2026-06-08 04:58:01.469169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1686 vulnerable 2026-06-08 04:58:01.466965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1685 vulnerable 2026-06-08 04:58:01.424138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1008 vulnerable 2026-06-08 04:56:40.729825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1007 vulnerable 2026-06-08 04:56:40.721916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0009 vulnerable 2026-06-08 04:56:33.131525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.