Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2670-1 | request-tracker3.8 security update |
Debian DSA |
DSA-2671-1 | request-tracker4 security update |
EUVD |
EUVD-2013-3307 | Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors. |
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-17T02:31:37.446Z
Reserved: 2013-05-06T00:00:00.000Z
Link: CVE-2013-3372
No data.
Status : Modified
Published: 2013-08-23T16:55:07.293
Modified: 2026-06-16T23:54:58.670
Link: CVE-2013-3372
No data.
OpenCVE Enrichment
No data.
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Debian DSA
EUVD