GCVE - cpe:2.3:a:bestpractical:rt:4.0.8:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:4.0.8:rc2:*:*:*:*:*:*

part: a version: 4.0.8 update: rc2

Vendor	Bestpractical (`d11f033e-f22b-5ad6-b9aa-22eb35718329`)
Product	Rt (`2dd314b6-71fe-5567-80a6-d4de9e20ea7f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/bestpractical/rt`	purl2cpe	2026-06-01 10:13:31.001959

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5587`	vulnerable	2026-06-08 05:04:52.291355	Details available Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-16T19:19:35.447Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://secunia.com/advisories/53505 http://www.debian.org/security/2012/dsa-2670	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3374`	vulnerable	2026-06-08 05:04:31.252006	Details available Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use." Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-17T03:53:01.985Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://secunia.com/advisories/53505 http://www.debian.org/security/2012/dsa-2670	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3373`	vulnerable	2026-06-08 05:04:31.249966	Details available CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-16T17:33:13.370Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://www.osvdb.org/93606 http://secunia.com/advisories/53505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3372`	vulnerable	2026-06-08 05:04:31.247642	Details available Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-17T02:31:37.446Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://www.osvdb.org/93607 http://secunia.com/advisories/53505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3371`	vulnerable	2026-06-08 05:04:31.246359	Details available Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-16T16:27:42.222Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://www.osvdb.org/93608 http://secunia.com/advisories/53505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3370`	vulnerable	2026-06-08 05:04:31.243555	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3369`	vulnerable	2026-06-08 05:04:31.242181	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3368`	vulnerable	2026-06-08 05:04:31.213239	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4884`	vulnerable	2026-06-08 05:02:53.088189	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4734`	vulnerable	2026-06-08 05:02:52.360387	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4732`	vulnerable	2026-06-08 05:02:52.353235	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4730`	vulnerable	2026-06-08 05:02:52.345310	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.