Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:4.0.0:rc2:*:*:*:*:*:*

part: a version: 4.0.0 update: rc2

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:31.001911

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5587 vulnerable 2026-06-08 05:04:52.279018 Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T19:19:35.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3374 vulnerable 2026-06-08 05:04:31.251627 Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3373 vulnerable 2026-06-08 05:04:31.249452 Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3372 vulnerable 2026-06-08 05:04:31.247256 Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3371 vulnerable 2026-06-08 05:04:31.245964 Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3370 vulnerable 2026-06-08 05:04:31.243133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3369 vulnerable 2026-06-08 05:04:31.241778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3368 vulnerable 2026-06-08 05:04:31.199038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4884 vulnerable 2026-06-08 05:02:53.080520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4734 vulnerable 2026-06-08 05:02:52.360023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4733 vulnerable 2026-06-08 05:02:52.353794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4730 vulnerable 2026-06-08 05:02:52.334384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2769 not_vulnerable 2026-06-08 05:02:06.236257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5093 vulnerable 2026-06-08 04:59:34.560325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5092 vulnerable 2026-06-08 04:59:34.559611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4460 vulnerable 2026-06-08 04:59:31.310613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4459 vulnerable 2026-06-08 04:59:31.294921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4458 vulnerable 2026-06-08 04:59:31.229933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2085 vulnerable 2026-06-08 04:58:03.868197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2084 vulnerable 2026-06-08 04:58:03.817112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2083 vulnerable 2026-06-08 04:58:03.811660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2082 vulnerable 2026-06-08 04:58:03.801367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1689 vulnerable 2026-06-08 04:58:01.473266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1688 vulnerable 2026-06-08 04:58:01.470882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1687 vulnerable 2026-06-08 04:58:01.469275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1686 vulnerable 2026-06-08 04:58:01.467077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1685 vulnerable 2026-06-08 04:58:01.428314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0009 vulnerable 2026-06-08 04:56:33.132501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.