← volver
CVE-2015-5475

CVE-2015-5475

EPSS 2.1%
Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://blog.bestpractical.com/2015/08/security-vulnerabilities-in-rt.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/164607.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/165124.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/165163.htmlhttps://bestpractical.com/release-notes/rt/4.2.12http://www.debian.org/security/2015/dsa-3335http://www.securityfocus.com/bid/76364