Best Practical Solutions RT 4.0.9
Approved changes feed: RSS · Atom
cpe:2.3:a:bestpractical:rt:4.0.9:*:*:*:*:*:*:*
part: a version: 4.0.9 update: *
| Vendor | Bestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329) |
|---|---|
| Product | Rt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bestpractical/rt |
purl2cpe | 2026-06-01 10:13:31.001960 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-5587 |
vulnerable | 2026-06-08 05:04:52.291933 |
Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T19:19:35.447Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3374 |
vulnerable | 2026-06-08 05:04:31.252021 |
Details available
Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information (user preferences and caches) via unknown vectors, related to a "limited session re-use."
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T03:53:01.985Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3373 |
vulnerable | 2026-06-08 05:04:31.249982 |
Details available
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T17:33:13.370Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3372 |
vulnerable | 2026-06-08 05:04:31.247659 |
Details available
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-17T02:31:37.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3371 |
vulnerable | 2026-06-08 05:04:31.246375 |
Details available
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.
Published: 2013-08-23T16:00:00.000Z
Updated: 2024-09-16T16:27:42.222Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3370 |
vulnerable | 2026-06-08 05:04:31.243572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3369 |
vulnerable | 2026-06-08 05:04:31.242199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3368 |
vulnerable | 2026-06-08 05:04:31.213812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.