CVE

Id
65534  
CVE No.
CVE-2013-5587  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.  
Phase
Assigned (20130823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639266 65534 CVE-2013-5587 MLIST:[rt-announce] 20130522 RT 3.8.17 released  View
639267 65534 CVE-2013-5587 URL:http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000228.html  View
639268 65534 CVE-2013-5587 MLIST:[rt-announce] 20130522 RT 4.0.13 released  View
639269 65534 CVE-2013-5587 URL:http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000227.html  View
639270 65534 CVE-2013-5587 MLIST:[rt-announce] 20130522 Security vulnerabilities in RT  View
639271 65534 CVE-2013-5587 URL:http://lists.bestpractical.com/pipermail/rt-announce/2013-May/000226.html  View
639272 65534 CVE-2013-5587 DEBIAN:DSA-2670  View
639273 65534 CVE-2013-5587 URL:http://www.debian.org/security/2012/dsa-2670  View
639274 65534 CVE-2013-5587 SECUNIA:53505  View
639275 65534 CVE-2013-5587 URL:http://secunia.com/advisories/53505  View
639276 65534 CVE-2013-5587 SECUNIA:53522  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23371 JVNDB-2013-004946 Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox のブラウザエンジンには、サービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-5592 65534 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004946.html  View