Description
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.htmlPatch
- http://secunia.com/advisories/44189Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220
- http://www.securityfocus.com/bid/47383
- http://www.vupen.com/english/advisories/2011/1071
- https://bugzilla.redhat.com/show_bug.cgi?id=696795Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66796
- http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.htmlPatch
- http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000189.htmlPatch
- http://secunia.com/advisories/44189Vendor Advisory
- http://www.debian.org/security/2011/dsa-2220
- http://www.securityfocus.com/bid/47383
- http://www.vupen.com/english/advisories/2011/1071
- https://bugzilla.redhat.com/show_bug.cgi?id=696795Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66796
Timeline
- Published
- Apr 22, 2011
- Last modified
- Jun 16, 2026
- NVD status
- Modified