GCVE - cpe:2.3:a:bestpractical:rt:4.0.7:rc1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:4.0.7:rc1:*:*:*:*:*:*

part: a version: 4.0.7 update: rc1

Vendor	Bestpractical (`d11f033e-f22b-5ad6-b9aa-22eb35718329`)
Product	Rt (`2dd314b6-71fe-5567-80a6-d4de9e20ea7f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/bestpractical/rt`	purl2cpe	2026-06-01 10:13:31.001954

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5587`	vulnerable	2026-06-08 05:04:52.289896	Details available Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-16T19:19:35.447Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://secunia.com/advisories/53505 http://www.debian.org/security/2012/dsa-2670	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3374`	vulnerable	2026-06-08 05:04:31.251960	Details available Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use." Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-17T03:53:01.985Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://secunia.com/advisories/53505 http://www.debian.org/security/2012/dsa-2670	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3373`	vulnerable	2026-06-08 05:04:31.249918	Details available CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-16T17:33:13.370Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://www.osvdb.org/93606 http://secunia.com/advisories/53505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3372`	vulnerable	2026-06-08 05:04:31.247595	Details available Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-17T02:31:37.446Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://www.osvdb.org/93607 http://secunia.com/advisories/53505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3371`	vulnerable	2026-06-08 05:04:31.246310	Details available Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment. Published: 2013-08-23T16:00:00.000Z Updated: 2024-09-16T16:27:42.222Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html http://www.osvdb.org/93608 http://secunia.com/advisories/53505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3370`	vulnerable	2026-06-08 05:04:31.243506	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3369`	vulnerable	2026-06-08 05:04:31.242126	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3368`	vulnerable	2026-06-08 05:04:31.211682	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4884`	vulnerable	2026-06-08 05:02:53.088137	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4734`	vulnerable	2026-06-08 05:02:52.360354	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4732`	vulnerable	2026-06-08 05:02:52.353196	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4730`	vulnerable	2026-06-08 05:02:52.344286	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.