Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bestpractical rt 3.8.14 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2012-4732
Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions prior to 3.8.15, and 4.0.6 and other versions prior to 4.0.8, allows remote malicious users to hijack the authentication of users for requests that toggle ticket bookmarks.
Bestpractical Rt 3.8.14Bestpractical Rt 3.8.13Bestpractical Rt 3.8.12Bestpractical Rt 4.0.6Bestpractical Rt 4.0.7Bestpractical Rt 4.0.8
3.5
CVSSv2
CVE-2012-4730
Request Tracker (RT) 3.8.x prior to 3.8.15 and 4.0.x prior to 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attacks or obtain sensitive information via unknown vectors.
Bestpractical Rt 3.8.5Bestpractical Rt 3.8.1Bestpractical Rt 3.8.12Bestpractical Rt 3.8.10Bestpractical Rt 3.8.7Bestpractical Rt 3.8.8Bestpractical Rt 3.8.0Bestpractical Rt 3.8.11Bestpractical Rt 3.8.6Bestpractical Rt 4.0.8Bestpractical Rt 4.0.0Bestpractical Rt 4.0.7Bestpractical Rt 4.0.3Bestpractical Rt 3.8.3Bestpractical Rt 3.8.4Bestpractical Rt 3.8.13Bestpractical Rt 3.8.2Bestpractical Rt 3.8.9Bestpractical Rt 4.0.4Bestpractical Rt 4.0.5Bestpractical Rt 4.0.1Bestpractical Rt 4.0.2
5
CVSSv2
CVE-2012-4734
Request Tracker (RT) 3.8.x prior to 3.8.15 and 4.0.x prior to 4.0.8 allows remote malicious users to conduct a "confused deputy" attack to bypass the CSRF warning protection mechanism and cause victims to "modify arbitrary state" via unknown vectors related to...
Bestpractical Rt 3.8.9Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.4Bestpractical Rt 3.8.7Bestpractical Rt 3.8.8Bestpractical Rt 3.8.2Bestpractical Rt 3.8.6Bestpractical Rt 3.8.10Bestpractical Rt 4.0.4Bestpractical Rt 4.0.5Bestpractical Rt 4.0.0Bestpractical Rt 4.0.7Bestpractical Rt 4.0.1Bestpractical Rt 3.8.14Bestpractical Rt 3.8.11Bestpractical Rt 4.0.3Bestpractical Rt 3.8.3Bestpractical Rt 3.8.13Bestpractical Rt 4.0.6Bestpractical Rt 4.0.2Bestpractical Rt 3.8.5
5
CVSSv2
CVE-2012-4884
Argument injection vulnerability in Request Tracker (RT) 3.8.x prior to 3.8.15 and 4.0.x prior to 4.0.8 allows remote malicious users to create arbitrary files via unspecified vectors related to the GnuPG client.
Bestpractical Rt 3.8.1Bestpractical Rt 3.8.0Bestpractical Rt 3.8.4Bestpractical Rt 3.8.2Bestpractical Rt 3.8.8Bestpractical Rt 3.8.14Bestpractical Rt 3.8.6Bestpractical Rt 3.8.9Bestpractical Rt 3.8.5Bestpractical Rt 3.8.3Bestpractical Rt 3.8.11Bestpractical Rt 3.8.12Bestpractical Rt 3.8.10Bestpractical Rt 3.8.7Bestpractical Rt 3.8.13Bestpractical Rt 4.0.2Bestpractical Rt 4.0.4Bestpractical Rt 4.0.8Bestpractical Rt 4.0.7Bestpractical Rt 4.0.0Bestpractical Rt 4.0.3Bestpractical Rt 4.0.1
3.3
CVSSv2
CVE-2013-3368
bin/rt in Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name.
Bestpractical Rt 4.0.12Bestpractical Rt 4.0.0Bestpractical Rt 4.0.1Bestpractical Rt 4.0.2Bestpractical Rt 4.0.5Bestpractical Rt 4.0.6Bestpractical Rt 4.0.7Bestpractical Rt 4.0.8Bestpractical Rt 4.0.11Bestpractical Rt 4.0.10Bestpractical Rt 4.0.9Bestpractical Rt 4.0.3Bestpractical Rt 4.0.4Bestpractical Rt 3.8.16Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.11Bestpractical Rt 3.8.12Bestpractical Rt 3.8.2Bestpractical Rt 3.8.4Bestpractical Rt 3.8.6Bestpractical Rt 3.8.8
6.8
CVSSv2
CVE-2013-3370
Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 does not properly restrict access to private callback components, which allows remote malicious users to have an unspecified impact via a direct request.
Bestpractical Rt 4.0.9Bestpractical Rt 4.0.0Bestpractical Rt 4.0.3Bestpractical Rt 4.0.8Bestpractical Rt 4.0.12Bestpractical Rt 4.0.11Bestpractical Rt 4.0.1Bestpractical Rt 4.0.2Bestpractical Rt 4.0.5Bestpractical Rt 4.0.6Bestpractical Rt 4.0.7Bestpractical Rt 4.0.10Bestpractical Rt 4.0.4Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.10Bestpractical Rt 3.8.13Bestpractical Rt 3.8.14Bestpractical Rt 3.8.3Bestpractical Rt 3.8.4Bestpractical Rt 3.8.7Bestpractical Rt 3.8.8
4.3
CVSSv2
CVE-2013-3372
Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 allows remote malicious users to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Bestpractical Rt 4.0.10Bestpractical Rt 4.0.9Bestpractical Rt 4.0.0Bestpractical Rt 4.0.2Bestpractical Rt 4.0.3Bestpractical Rt 4.0.4Bestpractical Rt 4.0.12Bestpractical Rt 4.0.1Bestpractical Rt 4.0.5Bestpractical Rt 4.0.6Bestpractical Rt 4.0.7Bestpractical Rt 4.0.8Bestpractical Rt 4.0.11Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.13Bestpractical Rt 3.8.14Bestpractical Rt 3.8.7Bestpractical Rt 3.8.8Bestpractical Rt 3.8.16Bestpractical Rt 3.8.11Bestpractical Rt 3.8.12
4.3
CVSSv2
CVE-2013-3374
Unspecified vulnerability in Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13, when using the Apache::Session::File session store, allows remote malicious users to obtain sensitive information (user preferences and caches) via unknown vectors, related to a &qu...
Bestpractical Rt 4.0.9Bestpractical Rt 4.0.0Bestpractical Rt 4.0.3Bestpractical Rt 4.0.4Bestpractical Rt 4.0.5Bestpractical Rt 4.0.12Bestpractical Rt 4.0.10Bestpractical Rt 4.0.2Bestpractical Rt 4.0.6Bestpractical Rt 4.0.7Bestpractical Rt 4.0.1Bestpractical Rt 4.0.8Bestpractical Rt 4.0.11Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.13Bestpractical Rt 3.8.14Bestpractical Rt 3.8.15Bestpractical Rt 3.8.8Bestpractical Rt 3.8.16Bestpractical Rt 3.8.12Bestpractical Rt 3.8.2
6
CVSSv2
CVE-2013-3369
Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors.
Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.13Bestpractical Rt 3.8.14Bestpractical Rt 3.8.7Bestpractical Rt 3.8.8Bestpractical Rt 3.8.16Bestpractical Rt 3.8.11Bestpractical Rt 3.8.12Bestpractical Rt 3.8.2Bestpractical Rt 3.8.6Bestpractical Rt 3.8.9Bestpractical Rt 3.8.10Bestpractical Rt 3.8.3Bestpractical Rt 3.8.4Bestpractical Rt 3.8.15Bestpractical Rt 3.8.5Bestpractical Rt 4.0.0Bestpractical Rt 4.0.5Bestpractical Rt 4.0.6Bestpractical Rt 4.0.7Bestpractical Rt 4.0.9
4.3
CVSSv2
CVE-2013-3371
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 up to and including 3.8.16 and 4.0.x prior to 4.0.13 allows remote malicious users to inject arbitrary web script or HTML via the filename of an attachment.
Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.11Bestpractical Rt 3.8.15Bestpractical Rt 3.8.2Bestpractical Rt 3.8.4Bestpractical Rt 3.8.5Bestpractical Rt 3.8.6Bestpractical Rt 3.8.8Bestpractical Rt 3.8.9Bestpractical Rt 3.8.13Bestpractical Rt 3.8.10Bestpractical Rt 3.8.3Bestpractical Rt 3.8.14Bestpractical Rt 3.8.7Bestpractical Rt 3.8.16Bestpractical Rt 3.8.12Bestpractical Rt 4.0.10Bestpractical Rt 4.0.0Bestpractical Rt 4.0.1Bestpractical Rt 4.0.2Bestpractical Rt 4.0.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook