Best Practical Solutions RT 3.8.0 preflight1
Approved changes feed: RSS · Atom
cpe:2.3:a:bestpractical:rt:3.8.0:preflight1:*:*:*:*:*:*
part: a version: 3.8.0 update: preflight1
| Vendor | Bestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329) |
|---|---|
| Product | Rt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bestpractical/rt |
purl2cpe | 2026-06-01 10:13:31.001843 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-3374 |
vulnerable | 2026-06-08 05:04:31.252101 |
Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3373 |
vulnerable | 2026-06-08 05:04:31.250066 |
Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3372 |
vulnerable | 2026-06-08 05:04:31.247741 |
Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3371 |
vulnerable | 2026-06-08 05:04:31.245193 |
Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3370 |
vulnerable | 2026-06-08 05:04:31.243655 |
Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T00:00:42.725Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3369 |
vulnerable | 2026-06-08 05:04:31.240975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3368 |
vulnerable | 2026-06-08 05:04:31.216546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4884 |
vulnerable | 2026-06-08 05:02:53.079734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4734 |
vulnerable | 2026-06-08 05:02:52.359298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4730 |
vulnerable | 2026-06-08 05:02:52.311176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.